Privacy Notice

Last updated: 5/31/2026

1. Who we are

ChopCheap is operated by Zedi International ("we", "us", "our"). We are the data controller for personal data collected through the Service.

2. Personal data we collect

• Account data — email address, password hash, display name and authentication identifiers (e.g. Google sign-in ID).
• Submission data — listings, prices, stores, areas, and notes you submit.
• Support messages — content of any messages you send us.
• Usage and device data — IP address, browser/device identifiers, pages viewed, and basic telemetry, collected for security and product improvement.
• Cookies — strictly necessary cookies for authentication and session management.

Payment information (card details, billing address, tax IDs) is collected and processed by our Merchant of Record, Paddle.com. We do not receive or store your full card details.

3. Purposes and legal bases

• Provide the Service — account creation, sign-in, displaying and accepting submissions (legal basis: performance of contract).
• Process payments — fulfilling your subscription order (legal basis: performance of contract; payments handled by Paddle).
• Security and fraud prevention — protecting accounts and the Service (legal basis: legitimate interests).
• Product improvement — understanding usage to improve features (legal basis: legitimate interests).
• Customer support — responding to your inquiries (legal basis: legitimate interests / performance of contract).
• Legal compliance — meeting tax, accounting and other legal obligations (legal basis: legal obligation).

4. Sharing your data

We share personal data only with:

• Service providers and subprocessors — hosting, database, authentication, analytics and email infrastructure used to run the Service.
• Paddle.com, our Merchant of Record, for sale of the product, subscription management, payment processing, tax compliance and invoicing.
• Professional advisers (legal, accounting) where strictly necessary.
• Authorities where required by law or to protect rights, safety or the integrity of the Service.

5. International transfers

Some of our service providers may process data outside your country of residence (including outside the UK/EEA). Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only as long as needed for the purposes above. Account and submission data are retained while your account is active and for a reasonable period afterwards for legal, accounting and dispute-handling purposes, then deleted or anonymised. Transaction records held by Paddle are retained according to Paddle's own policies and applicable tax law.

7. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with your local data protection authority.

To exercise these rights, contact us through the support channel in the Service. We aim to respond within one month.

8. Security

We apply appropriate technical and organisational measures — including encryption in transit, role-based access controls, and authentication safeguards — to protect personal data against unauthorised access, loss or misuse.

9. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising cookies. Your browser settings can be used to manage or block cookies, but doing so may affect the Service.

10. Changes to this notice

We may update this Privacy Notice from time to time and will post the updated version on this page with a new "Last updated" date.

11. Contact

Questions about this notice or your personal data? Contact Zedi International through the support channel listed in the Service.