Privacy policy Skip to content
DeployCue

Legal

Privacy policy

1. Introduction

We (we, us, our) are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website (the Site) and use our services (the Services).

We act as the data controller for personal data processed through the Site. For questions or to exercise your data protection rights, contact us at [email protected].

2. What data we collect

We collect only the data we need to operate the Site and provide the Services. We do not sell your personal data to third parties.

2.1 Information you provide directly

  • Newsletter subscriptions. When you subscribe to our newsletter, we collect your email address. You can unsubscribe at any time.
  • Direct messages. If you contact us by email, we process your email address and the content of your message to respond to your inquiry.
  • Quiz responses. When you use our provider-match quiz, we process your answers to provide personalised provider recommendations. Quiz responses are processed transiently and are not stored in a way that identifies you personally after your session ends unless you consent to analytics cookies.

2.2 Information collected automatically

  • Consent preferences. We store your cookie and analytics consent choices so we can respect them on subsequent visits.
  • Affiliate click and conversion attribution. When you click on a provider link, we record a pseudonymous click event to attribute sign-ups for affiliate reporting.
  • Analytics events (consent-gated). When you consent to analytics cookies, we collect page views, button clicks, quiz completions, calculator usage, and provider comparison interactions. All analytics data is pseudonymised.
  • Ad placement impressions and interactions. When you view or click on a sponsored placement or advertisement, we record pseudonymous or aggregated event data for reporting and billing.

3. Cookies and similar technologies

We use essential cookies and consent-gated analytics cookies. We do not use Google Analytics or Facebook Pixel.

3.1 Essential cookies (always active)

  • Session cookie. Maintains your session state while browsing.
  • Consent cookie. Stores your cookie preferences. Stored for 180 days.
  • CSRF token. A security cookie that protects against cross-site request forgery. Expires with the session.

3.2 Analytics cookies (consent required)

When you accept analytics cookies, we use a first-party analytics system to collect pseudonymous usage data. You can withdraw your analytics consent at any time by clicking Cookie settings in the page footer.

4. Legal basis for processing

  • Consent (Article 6(1)(a)). Analytics cookies, newsletter subscriptions, and non-essential data processing rely on your explicit consent.
  • Legitimate interests (Article 6(1)(f)). Essential cookies, affiliate click attribution, and security measures are processed under our legitimate interest in operating and improving the Site.
  • Legal obligation (Article 6(1)(c)). We may process data to comply with legal requirements.

5. How we share your data

We do not sell, rent, or trade your personal data. We share data only in these limited circumstances:

  • Affiliate networks. When you click through to a provider, the provider or its affiliate network receives an anonymized click identifier to track sign-ups. They do not receive your personal data from us.
  • Service providers. We use third-party infrastructure providers (hosting, email delivery, monitoring) under data processing agreements.
  • Legal requirements. We may disclose data if required by law, court order, or governmental authority.

6. Data retention

  • Newsletter subscriptions. Until you unsubscribe.
  • Analytics events. Raw analytics events are rolled up and deleted under the analytics cleanup schedule.
  • Affiliate click data. Click records without a conversion may be deleted after 180 days.
  • Direct messages. 12 months after the inquiry is resolved.

7. Your rights

Under the GDPR and equivalent laws, you have the following rights regarding your personal data: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.

To exercise any of these rights, email us at [email protected]. We will respond within one month.

8. International data transfers

DeployCue is a worldwide service and may process data in the countries where our infrastructure and service providers operate. Where personal data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit, hashing of API tokens, security reviews, and access controls.

10. Children's privacy

Our Site and Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and notify newsletter subscribers of material changes by email.

12. Contact

For questions about this Privacy Policy, contact us at [email protected].