Privacy Policy

Last updated: 17 August 2026

This policy explains what personal data OfferU collects when you use our website, the OfferU consumer app, or the OfferU Merchant app, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

OfferU ("we", "us") operates a UK location-based offer discovery and redemption platform. For data protection purposes, OfferU is the data controller of the personal data described in this policy.

Contact for data requests: privacy@offeru.org.uk

2. What data we collect

  • Account data — email address, display name, and a securely hashed password when you register.
  • Location data — your device's approximate or precise location, only while you use the app, to show nearby offers and calculate distances. Location is not collected in the background.
  • Redemption data — records of offers you redeem (offer, merchant, time), used to operate the service and prevent misuse.
  • Merchant business data — business name, address, and contact details for merchant accounts.
  • Technical data — device type, app version, and diagnostic logs used to keep the service secure and reliable.

We do not use third-party advertising trackers and we do not sell personal data.

3. How we use your data

  • To provide the service: showing nearby offers, generating QR codes, and processing redemptions (performance of a contract).
  • To secure accounts: email verification, login alerts, fraud and abuse prevention (legitimate interests / legal obligation).
  • To improve the service: aggregate, anonymised usage statistics (legitimate interests).
  • To provide anonymised, aggregated local-economy insights to community partners. These insights never identify individuals.

4. How long we keep data

  • Account data — for as long as your account is active, then deleted within 30 days of account deletion.
  • Redemption records — up to 24 months, for dispute resolution and fraud prevention, then anonymised.
  • Diagnostic logs — up to 90 days.

5. Sharing

We share data only with service providers who process it on our behalf (hosting, email delivery, payment processing), under contracts that meet UK GDPR requirements. Data is stored in the UK/EEA. When you redeem an offer, the merchant sees the redemption record but not your contact details.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent at any time. You can delete your account and its data directly in the app (Settings > Account > Delete Account) or by emailing privacy@offeru.org.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.

7. Children

OfferU is not directed at children under 13, and we do not knowingly collect their data.

8. Changes

We will post any changes to this policy on this page and, for material changes, notify you in the app or by email.