Privacy Policy

PickaLink Inc, a company registered in Mississippi, United States. Registered address: 313 Telly Rd Ste 1014, Picayune, MS 39466, USA. EIN 99-4009668. is the controller responsible for the processing of personal data on this website. For data protection enquiries, contact privacy@dealsmower.com.

(a) Automatically collected data — when you visit, our servers and providers (Cloudflare, Vercel) record your IP address, device type, operating system, browser, referring URL, and pages visited with timestamps. (b) Voluntarily provided data — if you use a contact form or newsletter signup, we collect your name, email, and message. (c) Affiliate click data — when you click an affiliate link we generate a random subId and record a timestamp; subIds are not personal data and cannot identify individuals. (d) Cookies — essential cookies for operation, and Google Analytics only with your consent (see our Cookie Policy).

IP and device data are processed to operate the website securely, protect against attacks, and optimise performance. Contact-form data is used solely to respond to your enquiry. Newsletter emails are used to send relevant updates until you unsubscribe. Affiliate click data is processed to attribute clicks and reconcile commissions, which funds our free service. We never process data for purposes beyond those described here.

We process personal data under the GDPR on these bases: Legitimate interest (Art. 6(1)(f)) — operating and securing the website and analysing aggregate usage to improve recommendations. Consent (Art. 6(1)(a)) — for non-essential analytics cookies via our cookie banner and for newsletter signups; you may withdraw consent at any time. Contract performance (Art. 6(1)(b)) — to respond to contact-form enquiries.

We use the following processors, each under a data processing agreement: Cloudflare (USA) — CDN, DNS, and DDoS protection; processes IP addresses and request metadata. Vercel (USA) — hosting and serverless functions; processes IP addresses and performance metrics. Google Analytics 4 (Google LLC, USA) — privacy-configured web analytics (IP anonymisation enabled) loaded ONLY after you grant analytics consent. Affiliate networks (Pickalink, Shoptastic, Awin) — receive click subIds and timestamps for commission reconciliation; no personal data is transmitted to them. CompanyEnrich/logo providers — serve brand logos via server-side requests only; no user data is sent.

Contact-form data is retained for 12 months, then deleted. Newsletter emails are stored until you unsubscribe, then deleted within 30 days. Server logs follow Cloudflare and Vercel default retention. Affiliate click subIds are retained for 90 days, matching affiliate attribution windows. We review retention periods annually and delete data no longer needed.

Under the GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). To exercise your rights, email privacy@dealsmower.com with the subject "GDPR Request". We will verify your identity and respond within 30 calendar days.

If you are in the EU or EEA, you have the right to lodge a complaint with the data protection supervisory authority of your country of residence, workplace, or the place of the alleged infringement. A directory of national authorities is available at edpb.europa.eu.

As the operator is established outside the EU and offers services to users in the EU, Article 27 GDPR may require the designation of an EU representative. [GDPR Art. 27 EU representative — to be designated]

For questions about this policy or your data protection rights, contact us at privacy@dealsmower.com. We aim to respond within 5 business days.