Privacy Policy

QuickCashback Ltd. ("we," "us," "our") operates the website quickcashback.co and the QuickCashback browser extension (together, the "Service"). This Privacy Policy explains what personal data we collect, how we use it, on what legal basis, who we share it with, and what rights you have.

1. Data we collect

1.1 Data you give us

Account: email address, password (stored hashed with Argon2id), display name, country of residence, and optional profile photo. Payout: PayPal email or bank details when you request a withdrawal. KYC (if required for payouts above regulatory thresholds): government-issued photo ID, proof of address.

1.2 Data collected automatically

Technical: IP address, browser user-agent, device fingerprint (used solely for fraud prevention), pages visited on our Service, and referring URL. Attribution: the retailer, timestamp, and amount of each click and confirmed purchase you make through our tracking links.

1.3 Data from third parties

Affiliate networks (Impact, CJ, Awin, Rakuten Advertising, ShareASale) report transaction data back to us — order value, currency, and status — so we can credit your cashback. Payment processors (PayPal, Stripe) provide confirmation that a payout has been received.

2. Legal basis for processing (GDPR)

We process your data on the following bases: (a) contract — to provide the Service you signed up for; (b) legitimate interests — fraud prevention, service improvement, aggregated analytics; (c) legal obligation — tax, anti-money-laundering, and record-keeping requirements; (d) consent — marketing emails and non-essential cookies.

3. How we use your data

To operate your account and process cashback, to detect fraudulent activity, to send transactional emails (payout confirmations, security alerts), to send marketing emails only if you have opted in, to comply with legal obligations, and to improve the Service.

4. Who we share data with

Affiliate networks receive an anonymous click identifier — never your name or email. Payment processors receive the payout amount and destination account. Cloud infrastructure providers (Cloudflare, AWS EU-West-1) host our systems under Data Processing Agreements. Government authorities receive data only when compelled by a valid legal order.

We do not sell your personal data to advertisers, data brokers, or anyone else.

5. International transfers

Your data is stored in the EU (Ireland). If a service provider we use is based outside the EU/UK, transfers are protected by Standard Contractual Clauses approved by the European Commission and, where applicable, additional safeguards.

6. Retention

Account data is retained for as long as your account is active. On account closure, personal identifiers are deleted within 30 days except for financial records which we are legally required to retain for 6 years (UK/EU tax law) or 7 years (US IRS).

7. Your rights

Under GDPR and CCPA you have the right to: access the personal data we hold about you; correct inaccurate data; erase your data (subject to legal retention); restrict processing; port your data to another service; object to processing; withdraw consent for marketing; lodge a complaint with your national data protection authority (in the UK, the ICO).

To exercise any right, email privacy@quickcashback.co. We respond within 30 days.

8. Cookies

See our separate Cookie Policy for the full list of cookies we use, their purpose, and how to manage your preferences.

9. Security

We use 256-bit TLS for all data in transit and AES-256 for data at rest. Passwords are hashed with Argon2id. Access to production data is limited to named engineers and logged. We run regular penetration tests and maintain a bug bounty program at security@quickcashback.co.

10. Children

The Service is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, email us and we will delete it.

11. Changes

We will notify you of material changes by email at least 30 days before they take effect. The current version and the date of last update are shown at the top of this page.

12. Contact

Data Protection Officer: dpo@quickcashback.co
Post: DPO, QuickCashback Ltd., 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom