This policy explains how ShopAt (www.shopat.lol) handles personal data under UK GDPR and the Data Protection Act 2018.
Who we are
ShopAt operates the website at https://www.shopat.lol. For privacy queries contact legal@shopat.lol.
Data we collect
- Account data — username, email, display name, password hash, optional bio/avatar/location if you add them.
- Deal & community activity — deals you post, votes, comments, and public profile content you choose to publish.
- Technical logs — IP address (stored hashed where used for rate limits / click logs), browser user-agent where provided by your client, and basic security logs.
- Cookies / session — a secure session cookie to keep you signed in and to protect forms with CSRF tokens.
Why we use it (lawful bases)
- Contract / account service — creating and running your account, posting deals, voting and commenting.
- Legitimate interests — securing the site, preventing abuse, measuring outbound deal clicks, improving rankings, and operating the deals desk.
- Consent — where required for non-essential cookies (see our Cookies policy).
- Legal obligation — if we must keep or disclose records under UK law.
Affiliate & third parties
When you click a Get deal button you leave ShopAt for a merchant or affiliate network (for example Digidip or Amazon). Those services have their own privacy notices. We do not sell your account email to merchants.
How long we keep data
- Account data — while your account remains open, then deleted or anonymised within a reasonable period after deletion.
- Click / security logs — typically retained for a short operational window for abuse prevention and analytics.
- Published deals and comments — may remain visible while the page is public; you can request removal of personal content where appropriate.
Your rights
Under UK GDPR you may request access, rectification, erasure, restriction, portability, and objection to certain processing. You can also complain to the ICO (ico.org.uk). To exercise rights, email legal@shopat.lol.
Children
ShopAt is aimed at adults shopping in the UK. Do not create an account if you are under 16.
Changes
We may update this policy. The “Last updated” date at the top of the page will change when we do.