Legal and privacy
Privacy Statement
In force since 8 September 2026 · Version 2.0
Who we are
Your Fashion Deal is operated by Programmatic SEO B.V.. We are the data controller for the personal data described in this statement, which means we decide why and how it is processed.
| Detail | Value |
|---|---|
| Legal entity | Programmatic SEO B.V. |
| Trading name | Your Fashion Deal |
| Registered address | Brouwerijstraat 1, 7523 XC Enschede, Netherlands |
| Chamber of Commerce (KvK) | 93094299 |
| VAT identification number | NL866274558B01 |
| Privacy contact | info@programmaticseo.agency |
Questions about your privacy: info@programmaticseo.agency
What this statement covers
This statement applies to the website at https://yourfashiondeal.com, the Your Fashion Deal app for iOS and Android, and the portal that shops use to publish deals. It covers shoppers, visitors who are not signed in, and the people who run a shop account.
When you follow a deal to a shop, you leave Your Fashion Deal and land on that shop's own website. What happens there is governed by the shop's privacy statement, not this one.
What we collect, why, and for how long
This is the complete list. If something is not in this table, we do not collect it.
| What | Why we need it | Legal basis | How long we keep it |
|---|---|---|---|
| Your name, email address, password (stored only as a cryptographic hash) and profile photo | To create and run your account, sign you in, and let other users see who wrote a comment | Performance of our agreement with you | Until you delete your account |
| Your date of birth | To check you meet the minimum age of 16 | Compliance with a legal obligation | Until you delete your account |
| Shop details: shop name, description, website, logo, banner, city and verification status | To run the shop portal and show the shop to shoppers | Performance of our agreement with the shop | Until the shop account is deleted |
| What you post: deals, product photos and videos, and comments | To show your content in the feed and on deal pages | Performance of our agreement with you | Until you delete it, or you delete your account. A comment you delete stops being shown straight away, and its text is erased 30 days later. The empty row stays so that replies to it do not disappear. |
| What you do in the app: which videos you watched and for how long, which deals you opened, which links you followed to a shop, likes, saves, follows, shares and searches | To decide which deals rank highly in the feed, to give shops statistics about their own deals, and to see which parts of the product are used | Our legitimate interest in running and improving the service | 14 months |
| Technical data: a shortened IP address, your browser or device user agent, and an anonymous session identifier | To count a video view once rather than many times, and to detect abuse and fraud | Our legitimate interest in security and in accurate counting | 90 days, and the IP address is shortened before it is stored |
| Your approximate location, if you allow it | To work out which city you are in so we can show deals near you | Your consent, which you can withdraw at any time | Not stored. It is used to resolve a city name and then discarded |
| A push notification token for each device | To send the deal alerts you asked for | Your consent | Until you turn notifications off or delete your account |
| Reports you file about content or accounts, and accounts you have blocked | To keep the platform safe and to comply with the Digital Services Act | Compliance with a legal obligation, and our legitimate interest in safety | 2 years after the case is closed |
| Email delivery and failure logs | To find out why a message did not arrive | Our legitimate interest in a working service | 90 days |
| Crash and error reports, which can include your user number | To find and fix faults | Our legitimate interest in a working service | 90 days |
| A record of the consents you gave or withdrew, and which version of a document you accepted | To be able to show what you agreed to and when | Compliance with a legal obligation | 3 years after your account is deleted |
Where the data comes from
- From you, when you create an account, post content, comment or fill in a form.
- From your device, when you use the app or the website: the technical data in the table above, and your location if you allow it.
- From the shop, when it publishes a deal that involves your order or enquiry. Today this does not happen, because you buy from the shop directly.
What the legal bases mean
European data protection law requires a reason for every use of your data. Ours are:
- Performance of our agreement with you. We cannot give you an account without storing your account.
- Legitimate interest. We use this for security, fraud prevention, statistics that are reported in aggregate, and keeping the service working. You can object to any of it, and we will stop unless we have a compelling reason not to.
- Consent. We use this for push notifications, location, marketing email and, if we ever switch it on, analytics. Consent is always optional and you can withdraw it at any time without losing access to the service.
- Compliance with a legal obligation. We use this for the age check, for moderation records and for proving consent.
Who else sees your data
We do not sell your personal data and we never have. We do use a small number of suppliers who process data on our instructions. Each of them is bound by a written agreement that allows them to use the data only for us.
| Who | What they do | What they see |
|---|---|---|
| Our hosting provider | Runs the servers and the database in Germany | Everything stored, as the operator of the machines |
| Google Cloud Storage | Stores the photos and videos uploaded to deals | Uploaded media files |
| Sentry | Collects crash and error reports so we can fix faults | Technical error details, which can include your user number |
| Our email provider | Sends account emails such as verification and password reset | Your email address and the content of those messages |
| OpenStreetMap (Nominatim) | Turns coordinates into a city name when you allow location access | Approximate coordinates, rounded before they are sent, and never your name or account |
| Google Analytics | Website statistics. Currently switched off. If we enable it we will ask for your consent first and update this statement. | Nothing today |
We also disclose data when the law requires it, for example to a court or a supervisory authority, and to our professional advisers when we need advice about a specific case.
Data leaving Europe
Our servers and database are in the European Union. Google Cloud Storage and Sentry are used on European regions. Where a supplier is part of a group with entities outside the European Economic Area, transfers rely on the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply to a specific supplier.
How long we keep things
The retention column in the table above is the full answer, and it is enforced by an automated job rather than by memory. In short: account data lasts as long as your account, behavioural data is removed after 14 months, technical identifiers after 90 days, and moderation records two years after a case closes.
When you delete your account we delete your account record, your likes, saves, follows, comments, notifications, push tokens, video views, deal opens and click-outs, and the media you uploaded. We keep the minimum needed for two things: moderation records where a report about serious harm was upheld, and the consent log, so we can still show what you agreed to. Both are described in the table above.
Your rights
You can ask us to do all of the following, free of charge.
- See what we hold about you.
- Get a copy in a portable file you can take elsewhere.
- Correct anything that is wrong.
- Delete your account and your data.
- Restrict what we do with your data while a dispute is open.
- Object to processing we base on legitimate interest.
- Withdraw a consent you gave, at any time.
Most of these have a button. Sign in and open your profile, or go to https://yourfashiondeal.com/data-rights, where you can export your data, correct it, change your consents and delete your account yourself. If you have uninstalled the app, that page still works, or you can write to us.
Data requests: info@programmaticseo.agency
We answer within one month. If a request is unusually complex we may take up to two months more, and we will tell you within the first month if that happens.
Automated decisions and profiling
We do not make decisions about you by automated means that have a legal or similarly significant effect.
The feed is ranked by how popular a deal is with everyone, not by a profile of you. Two users who open the app at the same moment see the same ranking. Your likes and saves change what appears on your own saved and followed lists, and nothing else.
Deals are checked by a person before they are published. Comments appear immediately and are reviewed by a person when someone reports them. We do not use an automated content filter.
Age
Your Fashion Deal is for people aged 16 and over. We ask for your date of birth when you create an account and we refuse accounts below that age. If you believe a child has an account, write to us and we will delete it.
Report an underage account: info@programmaticseo.agency
How we protect your data
- Passwords are stored only as a bcrypt hash. Nobody at Your Fashion Deal can read your password.
- All traffic between your device and us is encrypted in transit.
- Sign-in tokens are short lived and are rotated every time they are refreshed.
- Access to the production database is limited to the people who need it to keep the service running.
If a breach happens that is likely to put your rights at risk, we tell the Dutch Data Protection Authority within 72 hours and we tell you without undue delay.
Changes to this statement
Every version of this statement has a number and an effective date, both shown at the top of the page. When we make a change that affects you we tell you in the app and by email before it takes effect. Older versions stay available so you can see what changed.
If you are not happy
Write to us first. We would rather fix a problem than have you take it elsewhere, and we answer every message.
Privacy complaints: info@programmaticseo.agency
You also have the right to complain to the Dutch Data Protection Authority, Autoriteit Persoonsgegevens, at https://autoriteitpersoonsgegevens.nl. If you live in another European country you may complain to your own supervisory authority instead.