Privacy policy

Last updated: 16 October 2026

1. Who we are

Shmor.ai is operated by from our main office at ("Shmor", "we", "us"). We are the data controller for personal data collected through shmor.ai and the Shmor marketplace sites (*.shmor.ai).

For any privacy question or request, email .

2. What we collect and why

Data	Why we use it	Legal basis (UK/EU GDPR)
Shmor Weekly sign-up: full name, email address, phone number and country	To send the weekly Shmor Weekly email with deals and updates from across the Shmor network and, only if you tick the separate box, occasional text messages about big deals	Consent: you can unsubscribe from emails or texts at any time
Sign-up records: the date and time you signed up, your IP address, the page you signed up on, your region and your browser type	To keep a record of your consent and to prevent fraud and spam sign-ups	Legitimate interests in proving consent and keeping the list secure
Name, email, message (contact form)	To reply to your enquiry	Legitimate interests in responding to you
Search terms you type	To route you to the right marketplace. Searches are processed in your browser and passed to the marketplace you're sent to.	Legitimate interests in providing the service
Region preference (US / UK / EU)	Detected from your device's time zone and stored in your browser to show the right currency and offers. It is not sent to us.	Legitimate interests / strictly necessary
Usage data (pages viewed, device, approximate location)	To understand how our sites are used and improve them. Only collected if you accept analytics cookies.	Consent
Technical data (IP address, browser) in server logs	To host, secure and deliver the website	Legitimate interests in running a secure site

We don't ask for, and you shouldn't send us, payment details or sensitive information. We do not knowingly collect sensitive personal data.

3. When you click through to a provider

When you follow a link to a retailer or provider, you leave Shmor. The provider and the affiliate network that tracks the referral (such as CJ, Impact, Rakuten or Awin) may set their own cookies and collect data under their privacy policies. Any purchase, booking or enquiry is between you and them. We receive commission reports from networks, which normally don't identify you personally.

4. Who we share data with

We use service providers who process data on our behalf under contract:

• Website hosting: GitHub, Inc. (GitHub Pages), which processes technical request data to serve the site.
• Fonts: Google Fonts, which receives your IP address when your browser loads our typeface.
• Sign-ups: Google (Google Forms and Google Sheets) stores Shmor Weekly sign-ups for us. To record your IP address, your browser asks ipify (api.ipify.org) for its public IP address when you submit the form.
• Forms and email: our contact form and email-sending provider (for example Formspree, Brevo or Mailchimp), when you contact us or when we send the Shmor Weekly.
• Analytics: Google Analytics, only if you accept analytics cookies.

We do not sell your personal information for money. See section 9 for how US privacy laws define "selling" and "sharing".

5. International transfers

We and our providers operate in the US, the UK and the EEA, so your data may be processed outside your own country. When data leaves the UK or EEA, we rely on recognised safeguards: adequacy decisions, the EU–US Data Privacy Framework and UK Extension, Standard Contractual Clauses, and the UK International Data Transfer Addendum.

6. How long we keep it

• Shmor Weekly sign-ups: until you unsubscribe. We keep a record of your consent and unsubscribe for up to 24 months afterwards, so we can show we respected your choice.
• Contact messages: up to 24 months after our last reply.
• Analytics: up to 14 months.

7. Security

Our sites are served over HTTPS. We limit who can access personal data and use reputable providers. No system is perfectly secure, but we take reasonable steps to protect your information.

8. Your rights in the UK and EEA

Under the UK GDPR and the EU GDPR you have the right to access, correct or delete your data, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Email and we'll respond within one month.

You can complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, the data protection authority in your country (list of EU authorities). We'd appreciate the chance to help first.

9. Your rights in the United States

Depending on your state (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others), you may have the right to:

• know what personal information we collect, use and disclose, and get a copy;
• correct or delete your personal information;
• opt out of the "sale" or "sharing" of personal information, and of targeted advertising;
• not be discriminated against for exercising these rights.

Sale and sharing. We don't sell personal information for money. Optional analytics cookies, if you enable them, may count as "sharing" under some state laws. You can opt out at any time on our cookie page. We also honour Global Privacy Control (GPC) browser signals as an opt-out.

California notice at collection. The categories we collect are identifiers (email, name, IP address), internet activity (pages viewed, only with analytics), and approximate location (region or time zone). We use them for the purposes in section 2 and keep them for the periods in section 6. We don't use or disclose sensitive personal information.

To make a request, email . We'll verify your request and respond within 45 days. You may use an authorised agent. If we deny your request, you may appeal by replying to our response.

10. Children

Our sites are intended for adults (18+) and are not directed to children. We don't knowingly collect personal information from children under 16 (or under 13 in the US). If you believe a child has given us data, contact us and we'll delete it.

11. Changes

We may update this policy from time to time. The "last updated" date shows when it last changed. For significant changes, we'll make them prominent on our sites.