// Legal

Privacy Policy

Last updated: June 2026

    The short version: we collect your email and your football preferences. We use them only to send you kit deal alerts. We don't sell your data. You can delete everything by unsubscribing.
  

Who we are

KitBeacon is a football kit deal alert service operated by the operator of KitBeacon as a sole proprietor, based in Quebec, Canada. We monitor official club stores across Europe and send email alerts when kit prices drop.

If you have any questions about this policy, contact us at hello@kitbeacon.com.

What data we collect

We collect only what we need to send you relevant alerts:

Email address — to send you deal alerts.
Club preferences — which football clubs you want to track.
Size preferences — your kit size, if you choose to set one (Pro users only).
Minimum discount threshold — the minimum discount percentage you want to be alerted about (Pro users only).
Subscription tier — whether you're on the Free or Pro plan.
Alert history — a record of which deals you've already been alerted about, so we don't send duplicates.

We do not collect your name, address, phone number, or payment information. Payments for Pro subscriptions are handled entirely by Stripe — we never see your card details.

How we collect it

You provide your email when you sign up via our website. Your preferences are saved when you complete the preferences form. We only save preferences for email addresses that have confirmed their subscription via a double opt-in confirmation email.

Why we collect it and the legal basis

Under GDPR, we process your data on the following legal bases:

Consent — you actively signed up and confirmed your email. You can withdraw consent at any time by unsubscribing.
Contract — for Pro subscribers, processing is necessary to deliver the service you paid for.
Legitimate interest — keeping a record of sent alerts to avoid sending duplicates.

What we do with your data

We use your data solely to:

Send you football kit deal alert emails when a club you track has a sale.
Filter those alerts by your size and discount preferences.
Avoid sending you the same deal twice.

We do not use your data for advertising, profiling, or any purpose other than sending you the alerts you signed up for.

Who we share your data with

We share your data with the following service providers, who process it on our behalf:

Supabase — our database provider, hosted in Ireland (EU). Your preferences and alert history are stored here.
Kit (ConvertKit) — our email list platform, used to manage subscriptions and send deal alert emails.
Resend — our transactional email delivery provider, used to send alert emails.
Stripe — our payment processor for Pro subscriptions. Stripe processes payment information independently under their own privacy policy.

We do not sell, rent, or trade your data to any third party.

How long we keep your data

We keep your data for as long as you remain subscribed to KitBeacon. When you unsubscribe, all of your data — including your email address, club preferences, size preferences, and alert history — is permanently deleted from our systems. We do not keep backups of deleted subscriber data.

Your rights under GDPR

If you are based in the European Economic Area, you have the following rights:

Right to access — you can request a copy of the data we hold about you.
Right to rectification — you can update your preferences at any time via the preferences page.
Right to erasure — you can delete all your data at any time by unsubscribing.
Right to restrict processing — you can ask us to stop processing your data while keeping your account.
Right to data portability — you can request your data in a portable format.
Right to object — you can object to processing based on legitimate interests.
Right to withdraw consent — you can unsubscribe at any time using the link in any alert email.

To exercise any of these rights, contact us at hello@kitbeacon.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority if you believe we have not handled your data correctly.

Data security

Your data is stored in Supabase's EU infrastructure in Ireland. Access is restricted using Row Level Security policies. We use encrypted connections (HTTPS) for all data transfers. We do not store passwords — authentication is handled via email confirmation only.

Children

KitBeacon is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have collected data from a child, contact us at hello@kitbeacon.com and we will delete it immediately.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify active subscribers by email. The date at the top of this page always reflects the most recent version.

Contact

For any privacy-related questions or requests: hello@kitbeacon.com