Privacy notice

Last updated 22 October 2026

I’m Your Full Name, a sole trader based at your address, and the data controller for Rival Brief. Contact: you@yourdomain.com.

Shops whose public information is recorded

What: product names, prices, stock status, product types and website banner text, read once a day from the public pages of online shops. This is business information. Why and lawful basis: to help businesses understand their market using information shops publish for everyone. Where a shop is run by an individual, the basis is legitimate interests (Article 6(1)(f) GDPR). How long: up to 13 months. Your choice: any shop can ask not to be tracked; I stop within two working days.

Businesses I contact

What: the business name, website, the business email address published on that website, whether you replied and, if you ask me to stop, a record of that. Why and lawful basis: to offer a relevant service to businesses, under legitimate interests. I only email limited companies, only at an address they publish on their own website, and every email lets you opt out. How long: deleted 60 days after my last email if you don’t reply or buy. If you ask me to stop, I keep only your email address and domain on a suppression list so you’re never contacted again.

Newsletters I receive (Pro)

For Pro customers I sign up to rivals’ newsletters with a dedicated business address, like any subscriber, and summarise the offers they contain. I don’t take anyone’s personal data from them.

Customers

What: your name, email address, shop website, the details you add at checkout, our emails and payment records (card details stay with Stripe). Why: to deliver what you bought (contract) and keep accounts (legal obligation). How long: six years after the end of the tax year of the sale, as Irish tax law requires.

Who processes data for me

Google (email, documents and spreadsheets), Stripe (payments), Anthropic (AI summaries; it receives public shop information and your notes, never payment details) and Cloudflare (website hosting). Some are based in the United States; those transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

Your rights

You can ask for a copy of your data, or ask me to correct, delete, restrict or move it, and you can object at any time to direct marketing or to tracking. I’ll respond within one month. You can also complain to the Data Protection Commission (dataprotection.ie) or, in the UK, the Information Commissioner’s Office (ico.org.uk).

This website

This site sets no cookies, runs no analytics and loads nothing from third parties. The hosting provider keeps standard server logs for security.