Privacy policy

Maximus is operated by the site owner, reachable at support@maximusdeals.com. For the purposes of the EU and UK GDPR, the site owner is the data controller. Written privacy requests are answered from the same address.

• Account data — if you sign in: your email address, and the display name and country you choose. Sign-in is handled by our backend provider; we never see your password.
• Things you create — searches, saved products, watchlist entries, comments, deal submissions and feedback.
• Support messages — the name, email address and message you send through the support form, used only to reply to you.
• Anonymous usage — page views, product views and outbound offer clicks, tied to a random visitor id stored in your browser. There is no name, no email and no advertising profile attached to it.
• Technical data — the standard request information (such as IP address and browser) our hosting and backend providers log to keep the service running and secure.

We do not collect payment details — Maximus never takes payment. We do not knowingly collect data from children under 16, and we do not collect special-category data.

• To run the service you asked for — searches, verdicts, watchlists and your account. Legal basis: performance of a contract.
• To answer support messages. Legal basis: legitimate interest in helping you, or contract where it concerns your account.
• To keep the site secure, prevent abuse and control research costs. Legal basis: legitimate interest.
• To count anonymous page and product views so we know what is useful. Legal basis: consent in the EU and UK, legitimate interest in the United States.

Maximus does not run advertising cookies or third-party ad trackers. What we store in your browser is:

• Essential — your signed-in session, the country you shop in, and your privacy choice on this page. These are required for the site to work and are not optional.
• Analytics — a random visitor id used to count page views. In Spain, Germany, France, Italy and the UK this is only written after you accept; declining turns it off entirely and nothing else changes.

Outbound offers pass through our own redirect so we can count which offers people find useful. Where an affiliate programme applies, the link is marked as sponsored and the price you pay is unchanged. Once you land on a retailer's site you are subject to that retailer's own privacy policy, which we do not control.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We use a small number of processors to run the service: our cloud database and authentication provider, our hosting provider, and the AI and web-search providers that carry out product research. Research queries are product searches, not personal profiles, and account identifiers are not sent to them. We also disclose data where the law requires it.

Some of our providers process data in the United States. Where personal data leaves the EEA or the UK, it is transferred under the European Commission's Standard Contractual Clauses (plus the UK Addendum where relevant) as included in our agreements with those providers.

• Account data: until you delete your account, then removed.
• Searches, watchlist and comments: until you delete them or delete your account.
• Support messages: up to 24 months, so we can follow up on an earlier issue.
• Anonymous usage rows: up to 24 months, then aggregated or deleted.

Research results and price history describe products, not people, and are kept as part of the public catalogue.

Under the GDPR and UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another service. Where we rely on consent, you can withdraw it at any time using the control at the top of this page — withdrawing does not affect anything done before. You can also complain to your national data protection authority: the AEPD in Spain, the BfDI or your state authority in Germany, the CNIL in France, the Garante in Italy, or the ICO in the UK.

Depending on your state — including California under the CCPA/CPRA, and Colorado, Connecticut, Virginia, Texas and others with comparable laws — you can ask what personal information we hold, ask us to delete or correct it, and receive a portable copy. Maximus does not sell personal information and does not share it for targeted advertising, so there is nothing to opt out of on that front; you can still switch analytics off with the control above. We will not discriminate against you for exercising any of these rights.

Email support@maximusdeals.com or use the support form and choose “Privacy request”. We reply within 30 days. We may need to confirm you control the email address on the account before acting on a request.

Data is stored with access rules that keep each person's records readable only by them, and support messages readable only by the site owner. No service can promise perfect security, but we keep the surface small on purpose. If this policy changes materially we will update the date at the top and, where the change concerns consent, ask again.