Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Hyperlane Ventures Ltd
Trading as: UK Graphic Novel Deals / UKGNDeals
Email: [email protected]

2. What Data We Collect

We collect and process the following categories of personal data:

Account and subscription data (collected when you subscribe via Whop): your email address, Discord User ID, Discord display name, subscription tier (Reader, Collector, or Completionist), and subscription status.

D3-LZ preferences (collected when Completionist subscribers configure My D3-LZ): your selected publishers, product lines, series, creators, and individual book ISBNs used to personalise your deal updates and alerts. Priority type settings (which updates or alerts you classify as priority vs general).

Usage data (collected automatically or with your consent): anonymised website analytics via Cloudflare Web Analytics (no cookies, no personally identifiable information), and optional Google Analytics 4 events if you accept analytics cookies. Discord interaction data when you use the My D3-LZ setup wizard (button clicks, menu selections) is processed in real time and not stored beyond your active session.

Data we do not collect: We do not collect your real name, postal address, phone number, date of birth, or payment card details. All payment processing is handled by Whop and Stripe. We never see or store your card information.

3. How We Collect Your Data

Your data is collected through the following channels:

Whop: When you subscribe, Whop collects your email address and payment details as the merchant of record. Whop shares your email address, Discord User ID, subscription tier and subscription status with us so we can deliver the Service.

Discord: When you interact with our bot (My D3-LZ) or the setup wizard, your Discord User ID and display name are provided by Discord’s API. Your D3-LZ preferences are collected through the setup wizard interface.

Our website: Cloudflare Web Analytics collects anonymised, aggregate usage data. This does not identify individual visitors and does not use cookies. If you accept analytics cookies, Google Analytics 4 also collects optional website interaction events to help us understand how the site and shop are used.

4. How We Use Your Data

We use your personal data for the following purposes:

To deliver the service you have subscribed to: Matching D3-LZ updates and deal alerts to your preferences, sending updates via Discord channels or direct messages, and managing your subscription tier access.

To manage your subscription: Verifying your subscription status, assigning and revoking Discord roles when you subscribe, cancel, or change tier by cancelling and resubscribing.

To improve our service: Analysing anonymised, aggregate usage patterns to improve alert accuracy, website usability, and service reliability.

To communicate with you: Responding to support queries submitted through our Discord help desk channel.

We do not use your data for marketing purposes, sell your data to third parties, or use it for automated decision-making or profiling beyond the alert matching you have explicitly configured.

5. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

Contract performance (Article 6(1)(b)): Processing your subscription data and D3-LZ preferences is necessary to deliver the service you have paid for. Without this data, we cannot provide personalised updates, alerts or manage your subscription.

Legitimate interest (Article 6(1)(f)): Processing anonymised Cloudflare Web Analytics data to improve our service. This processing is minimal, uses no personally identifiable information, and does not override your rights.

Consent (Article 6(1)(a)): Processing optional Google Analytics 4 analytics cookies and related website interaction events if you choose to accept analytics cookies. You can reject or withdraw this consent at any time using Cookie settings.

6. Third-Party Processors

We share your data with the following third-party service providers who process it on our behalf:

Whop (Whop Inc.): Merchant of record for subscription payments. Processes your email address and payment information. Manages subscription lifecycle (creation, renewal, cancellation). Privacy policy

Stripe (Stripe Payments Europe, Ltd.): Payment processor used by Whop. Processes your payment card details. We never have direct access to your card information. Privacy policy

Discord (Discord Inc.): Communication platform through which D3-LZ updates, alerts and support messages are delivered. Processes your Discord User ID, display name, and message content. Privacy policy

Cloudflare (Cloudflare, Inc.): Hosts our website (Cloudflare Pages), runs our application logic (Cloudflare Workers), stores temporary session data (Cloudflare KV), and provides anonymised website analytics (Cloudflare Web Analytics). Privacy policy

Google (Google LLC): Our D3-LZ matching and data processing systems run on Google Apps Script and Google Sheets. Your Discord User ID, D3-LZ preferences, and subscription status are stored in Google Sheets. If you accept analytics cookies, Google Analytics 4 processes optional website interaction events such as page views, shop interactions, retailer click-outs, subscription CTA clicks, and community link clicks. Google’s infrastructure processes this data. Privacy policy

All third-party processors are contractually obligated to protect your data and process it only as instructed by us.

7. International Data Transfers

Some of our third-party processors (Whop, Stripe, Discord, Cloudflare, Google) are based in the United States. Where your data is transferred outside the UK, it is protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and, where applicable, the UK-US Data Bridge under the UK Extension to the EU-US Data Privacy Framework.

8. Data Retention

We retain your data for the following periods:

Subscription and preference data: For the duration of your active subscription, plus 30 days after cancellation to allow for reactivation. After 30 days, your D3-LZ preferences and Discord User ID are deleted from our systems.

Payment records: Retained by Whop and Stripe in accordance with their own retention policies and applicable financial record-keeping regulations.

Anonymised Cloudflare analytics data: Retained indefinitely as it cannot be linked to any individual.

Google Analytics 4 data: Retained according to our Google Analytics data retention settings and used only in aggregate reporting.

9. Cookies and Analytics

Cloudflare Web Analytics runs as a privacy-focused, cookieless analytics baseline. It does not track individual visitors or collect personally identifiable information.

We also use optional Google Analytics 4 analytics cookies if you accept them. These help us understand which pages, shop filters, product overlays, retailer links, subscription buttons, and community links are being used so we can improve UK Graphic Novel Deals.

Google Analytics 4 events may include page path, publisher, retailer code, ISBN, title, series, format, and general CTA location. We do not use analytics cookies to collect payment details, Discord IDs, email addresses, or full retailer URLs.

You can reject analytics cookies and continue using the site normally. You can change your choice at any time using the Cookie settings link in the footer.

If you interact with the Whop checkout page during subscription, Whop may set cookies in accordance with their own cookie policy.

10. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate data. You can also update your D3-LZ preferences directly through the My D3-LZ setup wizard at any time.
• Right to erasure: You can request deletion of your personal data. Upon cancellation of your subscription, your data is automatically deleted after 30 days. You can request immediate deletion at any time.
• Right to restriction of processing: You can request that we limit how we use your data.
• Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
• Right to object: You can object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

11. Children

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.

12. Security

We take reasonable measures to protect your personal data:

• All data transmitted between your browser and our website is encrypted using TLS (HTTPS), provided automatically by Cloudflare.
• Payment card data is handled exclusively by Whop and Stripe, both of which are PCI DSS compliant. We never see, process, or store your card details.
• Access to our data processing systems (Google Sheets, Apps Script) is restricted to authorised personnel only.
• Our application logic (Cloudflare Workers) uses authentication keys and Discord’s cryptographic signature verification to prevent unauthorised access.
• Session data in Cloudflare KV is temporary and automatically expires.

While we take reasonable precautions, no system is completely secure. We cannot guarantee absolute security of your data.

13. Affiliate Links

Our website, D3-LZ updates, alerts and communications may contain links to third-party retailer websites. Some of these links are affiliate links, meaning we may earn a small commission if you make a purchase through them, at no additional cost to you. These affiliate relationships do not influence which deals we surface or how D3-LZ updates and alerts are prioritised. Clicking an affiliate link will take you to the retailer’s website, which is governed by that retailer’s own privacy policy.

14. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify subscribers via Discord. The “Last updated” date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically.

15. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us at [email protected] first.

16. Contact Us

If you have any questions about this privacy policy or how we handle your data:

• Email: [email protected]
• Discord: Via the help desk channel in our Discord server