Legal
Privacy Policy
Last updated · 31 July 2026
Who we are
WOW Offers UK (“WOW Offers”, “we”) is a curated offer-discovery service for members in the United Kingdom, operated by WOW Campaigns (⚠️ owner: insert the exact registered entity name and address before launch).
This policy explains what we collect, why, and what you can do about it. It is written to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Under that law you are the data subject and we are the data controller.
What we collect
Only what the service actually needs. Specifically:
- Your name, mobile number, email address and city — given when you register or claim an offer.
- Your claims: which offers you claimed and when, and the WOW code issued to you.
- Messages and support requests you send us, and our replies.
- If you turn on alerts: a device token so a notification can reach that device. Nothing else about the device.
- Basic technical data your browser or phone sends with every request, such as IP address and app version.
We do not collect payment card details. We do not track you across other apps or websites, and we do not sell your data to anyone.
Why we collect it — and the one thing you should know
WOW Offers exists to introduce members to brands. When you claim an offer, we share the details needed to honour it — your name, mobile number, email and city — with that specific brand, so they can contact you and fulfil it.
That sharing is the whole point of a claim, and it happens only for the brand whose offer you claimed. Brands do not see your other claims, your messages, or any offer you did not claim. If you do not want a brand to have your details, do not claim their offer.
Who else processes your data
We use a small number of providers, each for one job:
- Supabase — the database and sign-in system that stores your account.
- Railway — hosting for the application itself.
- Google Sheets — the delivery mechanism for a claimed lead to the brand it belongs to.
- Resend — sending support and service emails.
- Cloudflare — content delivery and protection against abuse.
- Apple and Google — only if you install the app and enable notifications, to deliver them.
Some of these operate servers outside the UK. Where that happens, the transfer is limited to what the service requires and is made on a basis permitted under UK data protection law.
How long we keep it
Your account and claim history are kept while your account is open, because a claim is a commitment a brand may need to honour months later.
When you delete your account, we delete it. You can do this yourself, at any time, in Settings → Delete my account — no email, no waiting. Claims already shared with a brand remain with that brand, because we cannot reach into their records; contact them directly to have those removed.
Your rights
Under UK GDPR you may:
- Ask what personal data we hold about you, and why.
- Correct anything inaccurate — your name, mobile, email and city are editable in your profile at any time.
- Delete your account and the data attached to it.
- Withdraw consent for notifications, at any time, in Settings or in your phone’s own settings.
- Ask us to restrict processing, or receive your data in a portable format.
- Raise a complaint with us, and escalate to the Information Commissioner’s Office (ICO) if we do not resolve it.
Children
WOW Offers is not intended for anyone under 18, and we do not knowingly create accounts for children. If you believe a child has registered, contact us and we will remove the account.
Security, stated honestly
Access to your data is restricted at the database level, traffic is encrypted in transit, and administrative access is limited. No system is perfectly secure, and we will not claim otherwise. If a breach affects you, we will tell you and the ICO as UK GDPR requires.
Our data protection contact
Write to sales@wow-offers.co.uk and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Information Commissioner’s Office (ico.org.uk).
⚠️ Owner: good practice is a named individual and a registered address here, not just an email. Add both before launch.
Changes
If this policy changes materially we will say so in the app rather than quietly editing the page. The date at the top always reflects the current version.
