Privacy Policy

SavvyPrimeClub, a service operated by SJ Marketing Ltd ("we", "us", or "our"), is committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit savvyprimeclub.co.uk or use our membership service, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using our website or becoming a member, you acknowledge you have read and understood how we handle your personal data.

Who We Are

SavvyPrimeClub is a UK-based membership service, operated by SJ Marketing Ltd, that curates exclusive Amazon deals and discounts for our members.

For the purposes of UK data protection law, we are the Data Controller responsible for your personal information.

Data We Collect

We collect and process the following categories of personal data:

Information You Provide Directly

• Identity data — first name, last name, username or similar identifier
• Contact data — email address, postal address (where provided)
• Account data — membership status, preferences, and settings
• Communications — messages you send us via email or contact forms

Payment Information

When you purchase a membership, payment card details are collected and processed directly by our payment processor, Stripe. We do not store your full card details on our servers. We retain a record of your transaction (amount, date, subscription status) for billing and fraud prevention purposes.

Automatically Collected Data

• Technical data — IP address, browser type and version, device type, operating system
• Usage data — pages visited, time spent on site, clicks, referring URLs, and session data
• Cookie data — see the Cookies section below
• Campaign data — the campaign tags (such as utm_source) and the Facebook click identifier (fbclid) in the link that brought you here, where there is one — see Where you arrived from

How We Use Your Data

Legal Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

• Contract performance — processing necessary to deliver your membership and services you have signed up to.
• Legitimate interests — where we have a business interest in improving our service or protecting our platform, provided that interest is not overridden by your rights.
• Consent — where you have explicitly opted in, such as for marketing emails. You may withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with UK law.

Third-Party Services

We work with a small number of trusted third-party providers. Each acts as a data processor on our behalf and is contractually required to keep your data secure and use it only for the purposes we specify.

💳 Stripe (Payments)

All membership payments are processed by Stripe, Inc. Stripe collects payment card data and is certified to PCI-DSS Level 1 standards. We receive confirmation of payment but never your raw card details. You can review Stripe's privacy policy at stripe.com/gb/privacy.

📊 Website Analytics

We do not use Google Analytics or any other third-party analytics service. We count visits ourselves, on our own server, and the data never leaves it. No cookies are used and no advertising or tracking network is involved — see Cookies & Tracking below for exactly what is recorded.

📧 Amazon Web Services (Email Delivery)

Our deal emails and service emails (the email-confirmation link, password resets, membership notices) are sent from deals@savvyprimeclub.co.uk through Amazon Web Services' Simple Email Service (Amazon SES), using servers in the EU (Stockholm, Sweden). Your name and email address are passed to Amazon SES only to deliver each message; the emails themselves are written on our own server. Our emails contain no open-tracking pixel, so we do not know whether you have opened one. Deal links in our emails go through our own address (savvyprimeclub.co.uk/go) on the way to Amazon so that we can count which deals are clicked: each click records the product, your member number, the time, your IP address and browser type. We use these records to see which deals members find useful and whether the emails are working, and (from November 2026) to pick deals for you: the searches you make on the site and the deals you open are used for 30 days to add similar deals to your emails and your “For you” list, and to email you once if a deal you opened in the last 21 days becomes clearly cheaper. Our legal basis is our legitimate interest in sending you deals you are likely to want. You can switch this off at any time on your Account tab (“Deals from what you look at”); switching it off deletes that search and viewing history straight away. Every email carries an unsubscribe link, and you can also pause or stop emails from your account page or by contacting us. AWS's privacy notice is at aws.amazon.com/privacy.

📣 Meta (Facebook) Advertising Measurement — from November 2026

We promote SavvyPrimeClub on Facebook. There is no Meta (Facebook) pixel on this website and Meta sets no cookie here. Instead, from November 2026, our own server tells Meta when a post or advert has led to a new member, so that we can measure our advertising and avoid paying to show adverts to people who are already members.

It works like this. When you arrive from a Facebook post or advert, the link usually carries a click identifier ("fbclid") and campaign tags. We keep these with your visit and, if you create an account, with your account. When you then create an account, confirm your email address, start a free trial or pay for membership, our server sends Meta a message saying that the event happened, together with your email address in hashed form (SHA-256, a one-way code that Meta can compare with its own users but cannot turn back into your address), the click identifier, your IP address and your browser type. Meta Platforms Ireland Ltd uses this to match the event to the advert that led to it and reports the results to us as totals, never as named people. We do not send Meta your name, your password, which deals you look at or anything you buy on Amazon.

We may also upload a list of our members' email addresses to Meta as a "customer list", again only as SHA-256 hashes, so that our adverts are not shown to existing members and so that Meta can find audiences similar to them. Meta cannot read the addresses: it only compares the hashes with those of its own users.

Our legal basis is our legitimate interest in measuring and controlling the cost of our advertising. You can object at any time by emailing privacy@savvyprimeclub.co.uk; we will then leave your account out of these messages and out of any customer list. You also have the right to complain to the ICO (see Contact & Complaints). Meta's privacy policy is at facebook.com/privacy/policy.

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

Cookies & Tracking

We use only the cookies needed to run the website. A cookie is a small text file placed on your device.

You can manage or clear cookies at any time through your browser settings. Note that clearing the strictly necessary cookies will sign you out.

How we count visits without cookies

To know how many people use the site and which pages are useful, our own server records each page view: the page address, the referring website, whether the device is a phone or a computer, and — if you are signed in — your member account.

To count how many different people visited on a given day without identifying anyone, we create a one-way code from your IP address and browser combined with a secret value and the current date. Your IP address itself is never stored. Because the date forms part of the code, the same visitor produces a completely different code the next day, so this cannot be used to recognise you over time, to build a profile, or to identify you. The individual records are deleted after 90 days; only anonymous daily totals (for example “412 visits to the homepage on 3 March”) are kept after that.

On our short offer page (/start) we also record, with the same one-day code, what you type in the deal search box, which buttons you tap and how far down the page you scroll, so we can see what is useful. These records are not linked to an account and are deleted after 90 days. Please do not type personal details into the search box; anything that looks like an email address or phone number is not kept.

This is first-party, aggregate statistical measurement. It sets nothing on your device, which is why the site shows no cookie banner for it.

Where you arrived from

If the link that brought you here carries campaign tags (for example utm_source) or a Facebook click identifier (fbclid), we note them with the page view and keep them in your existing session for the rest of your visit. If you create an account, they are saved with it so that we know which post or advert brought you. This uses the same session that signs you in; no new cookie is set, and nothing is shared with Meta unless you create an account (see Third-Party Services).

Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law.

• Account data — retained for the duration of your membership and for up to 2 years after cancellation (to assist with any disputes or re-subscriptions).
• Payment records — retained for 7 years in line with HMRC tax record requirements.
• Marketing data — retained until you unsubscribe or withdraw consent.
• Analytics data — individual page-view records are deleted after 90 days; anonymous daily totals may be kept indefinitely.
• Where you came from — the source, campaign tags and Facebook click identifier recorded when you joined are kept with your account data and go when it does.
• Deal-click records — kept while your account exists so that we can see which deals members find useful; once the account is deleted the clicks can no longer be linked to you and only the statistical totals (how often each deal was clicked) are used.
• Support communications — retained for up to 2 years from the date of resolution.

When data is no longer needed, we securely delete or anonymise it.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data. You can exercise any of these rights free of charge by contacting us at privacy@savvyprimeclub.co.uk. We will respond within one calendar month.

International Transfers

Some of our third-party service providers are based outside the UK. When your data is transferred internationally, we ensure appropriate safeguards are in place:

• Stripe — operates in the US and EEA under the UK-US Data Bridge and Standard Contractual Clauses.
• Amazon Web Services (email delivery) — our emails are sent from AWS servers in Stockholm, Sweden, inside the EEA, which the UK recognises as providing adequate protection; AWS's standard data processing terms also apply.
• Meta Platforms Ireland (advertising measurement, from November 2026) — based in Ireland, inside the EEA; Meta may transfer data to Meta Platforms, Inc. in the US under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") and Standard Contractual Clauses.

You can request more information about these transfer mechanisms by contacting us at privacy@savvyprimeclub.co.uk.

Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, loss, or disclosure. These include:

• HTTPS encryption across the entire website (TLS)
• Secure, access-controlled server environments
• Payment data handled exclusively by PCI-DSS compliant Stripe
• Regular review of our data access controls and security practices

However, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at privacy@savvyprimeclub.co.uk.

Children's Privacy

Our service is not directed at children under the age of 13, and we do not knowingly collect personal data from anyone under this age. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify you by email or by displaying a prominent notice on our website. The "Last updated" date at the top of this page will always reflect the most recent version.

We encourage you to review this policy periodically.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your data, please get in touch:

Right to Lodge a Complaint

If you are unhappy with how we have handled your data and we have been unable to resolve your concern, you have the right to lodge a complaint with the UK's supervisory authority: