Legal

Privacy Policy

Last updated: 1 November 2026

The Real Deal helps South African shoppers discover deals ranked by RealRank™ and click through to retailer websites. This policy explains what information we collect, how we use it, and the choices available to you. We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

Information we collect

Account information: if you create an account or sign in, we collect the details needed to operate that account, such as your email address and authentication identifier.
Google sign-in information: if you use Google sign-in, we receive basic Google account information needed to sign you in, such as your email address, name, profile image, and Google account identifier. We do not request access to Gmail, Drive, Calendar, Contacts, or other Google workspace data.
Deal activity: we store account actions such as saved deals, followed brands, alert preferences, votes, comments, searches, and outbound deal clicks where needed to operate the service.
Email lead information: if you subscribe to deal alerts, we collect your email address and selected interests so we can send relevant alerts and manage preferences.
Essential analytics and personalisation (always on): to operate, secure and personalise the service we record usage activity such as page views, deal impressions, deal views, outbound clicks, searches, and which deals, brands and categories you interact with (including likes, skips, shares and time spent). This activity is keyed to a persistent, pseudonymous device identifier that we store on your device for up to two years, and we use it to build an interest profile of your device so we can recommend more relevant deals. We do not attach your name or email to this profile, and we rely on our legitimate interest under POPIA; you can object at any time (see 'Your choices' below), and personal identifiers such as emails are actively stripped from these events.
Linking to your account: if you create an account or sign in, we associate this device profile and its prior activity with your account so your personalisation and saved items follow you. If you would prefer this activity not be linked, use the service signed out or contact us to object.
Enhanced analytics (only with your consent): if you accept enhanced analytics, we additionally enable PostHog features such as interaction autocapture, web vitals, heatmaps, and, for invited testers, masked session recordings. You can withdraw this at any time.
Advertising (only with your consent, and off by default): if you accept advertising cookies, we share activity such as the deals you view, the searches you run and the retailers you click through to with Meta Platforms (Facebook and Instagram), so that the ads we run reach people with matching interests and we can measure whether they worked. We do not send your name, email address or phone number, and search terms that match an email or phone pattern are removed before sending. This is the only category we share with a third party for that third party's own purposes, and you can withdraw it at any time using Cookie settings in the footer. See our Cookie Policy for the full detail.
Technical data: our hosting, database, authentication, and analytics providers may process standard technical data such as IP address, browser type, device type, and log data for security, reliability, and diagnostics.

How we use information

To provide deal discovery, search, saved deals, followed brands, community features, and deal alerts.
To authenticate users, keep accounts secure, and maintain user sessions.
To rank and improve deals, understand conversion to retailer websites, and improve the product experience.
To send requested deal alerts, preference updates, and service messages.
To monitor abuse, prevent fraud, troubleshoot errors, and comply with legal obligations.

Legal basis for processing (POPIA)

We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).
We rely on one or more lawful bases recognised under POPIA: your consent (for example, deal alerts, enhanced analytics, and advertising cookies); the performance of a contract or steps taken at your request (for example, operating your account); our legitimate interests in running, securing, and improving the service, balanced against your rights and interests; and compliance with legal obligations.
Consent is asked for each purpose separately. Accepting analytics is not consent to advertising, and you can accept either without the other. Where we rely on consent you may withdraw it at any time using Cookie settings in the footer, which is no harder than giving it was. Withdrawal does not affect processing already carried out.
If your browser sends a Global Privacy Control signal we treat it as a standing refusal of advertising cookies, and no advertising sharing takes place regardless of any earlier answer.

Direct marketing and deal alerts

We only send marketing communications, such as deal alerts, where you have opted in and given consent, in line with section 69 of POPIA.
Every marketing email includes an unsubscribe option, and you can withdraw consent or update your preferences at any time. Withdrawing consent does not affect processing carried out before withdrawal.
We may still send non-marketing service, account, or security messages needed to operate the service.

How we share information

We use service providers to operate the site, including Supabase for database and authentication, Vercel for hosting, PostHog for analytics, Cloudflare for bot protection on forms, and Google for Google sign-in.
Where you have accepted advertising cookies, we also share activity with Meta Platforms Ireland Limited for advertising measurement and targeting. Meta acts for its own purposes in respect of that data, not merely as our service provider. This sharing does not happen at all unless you switch it on.
Some of these providers may store or process information on servers outside South Africa. Where personal information is transferred across borders, we take reasonable steps, consistent with section 72 of POPIA, to ensure it receives a level of protection comparable to POPIA - for example by using providers bound by appropriate contractual terms or subject to laws that offer adequate protection.
When you click an outbound deal, you leave The Real Deal and visit the retailer or brand website. That website has its own privacy practices.
We may use affiliate or sponsored links. This does not change the price you pay, but we may earn a commission or receive commercial benefit if you click or buy through a partner.
We may disclose information where required by law, to protect our rights, our users, or the security of the service, or as part of a business sale, merger, restructuring, or transfer.

Data use, sharing, and monetisation

The Real Deal is a commercial business, and we use data to generate revenue. This includes creating, using, licensing, sharing, and selling aggregated, anonymised, or de-identified data - such as deal trends, category demand, pricing insights, and click and conversion statistics - which does not identify you as an individual. We may commercialise this data freely and it may be retained indefinitely.
Where we share or sell personal information that can identify you to third parties for their own commercial, advertising, or marketing purposes, we do so only with your consent or on another lawful basis recognised under POPIA. You can withdraw consent or opt out of such sharing at any time by contacting us.
We may also combine information we hold about you to build interest and audience profiles used to personalise deals, target communications, and improve and monetise the service.

Cookies, local storage, and analytics consent

We use browser storage to keep users signed in, remember preferences, support analytics consent choices, and improve site functionality.
Essential analytics and personalisation run without consent under our legitimate interest: they use a persistent pseudonymous device identifier (stored for up to two years) to record activity and build a device interest profile used to personalise deals, as described in 'Information we collect' above. This profile is not tied to your name or email, is linked to your account if you sign in, and you can object at any time by contacting us or by clearing your browser storage for this site. Enhanced analytics features (autocapture, heatmaps, tester session recordings) only run after you accept them, and you can switch them off again at any time.
You can control cookies and local storage through your browser settings, although some account features may stop working if storage is blocked.

Retention and deletion

We keep account and preference information while your account is active or while needed to provide requested services.
We keep analytics and operational logs for a limited period needed for product improvement, security, and diagnostics.

Your rights under POPIA

Subject to POPIA, you have the right to: be told what personal information we hold about you and to access it; request that we correct or delete your personal information; object to processing, including for direct marketing; and withdraw consent where our processing is based on consent.
To exercise any of these rights, contact our Information Officer using the details in the Contact section. We may need to verify your identity before acting on a request, and some information may be retained where the law requires or permits it.
If you believe we have not handled your personal information lawfully, you have the right to lodge a complaint with the Information Regulator (South Africa).

Security

We use hosted infrastructure and access controls designed to protect user data. No internet service can guarantee absolute security, but we work to limit access and reduce unnecessary data collection.

Children

The Real Deal is intended for a general shopping audience and is not directed at children. Under POPIA a child is a person under 18 years of age.
You must be 18 or older to create an account or sign up for deal alerts or other emails, as set out in our Terms of Use. Browsing the site needs no account.
We do not knowingly collect personal information from children without the consent of a competent person, such as a parent or guardian. If you believe a child has provided us with personal information, contact us and we will delete it.

Operator and contact details

The Real Deal is operated by Real Deal Technologies (Pty) Ltd, a private company registered in South Africa under registration number 2026/355547/07, with its physical address at 507 Portside, 1 Upper Portswood Road, Green Point, Cape Town, Western Cape, 8051, South Africa.
Information Officer: Matthew Potgieter, contactable at matt@therealdeal.shop.
For privacy questions or to exercise your rights, contact matt@therealdeal.shop.
Information Regulator (South Africa): complaints may be made to the Information Regulator - POPIAComplaints@inforegulator.org.za or enquiries@inforegulator.org.za, website https://inforegulator.org.za.