Bag the bargains, but skip the spam

Bag the bargains, but Skip the Spam

January sales are a great opportunity to save money, but they can also come at a hidden cost – your personal data. From discount codes and flash sales to loyalty schemes and marketing sign-ups, retailers often collect far more information than consumers realise. While the savings may feel worthwhile, it’s important to understand how your data is being used, shared, and stored. Being aware of data privacy risks during sales can help you protect your personal information and make informed choices when shopping online or in-store.

When the sales hit, inboxes are flooded with promotional emails and websites are inundated with sign-up boxes. Before you click “accept all” (and we’ve all been there!) or hand over your email address for 10% off, here are a few important data privacy considerations to keep in mind.

 

You Don’t Need to Sign Up to Every Discount

That 10% off can be very tempting to grab a bargain, particularly as pockets are squeezed following Christmas, but not every discount is worth receiving countless more marketing emails. Ask yourself:

  • Do I actually want marketing emails from this brand?
  • Is this a one-off purchase, or will I shop here again?
  • Is the discount worth sharing my personal data for? 

It’s also important to remember, if you do decide you do want that discount, you can ask to be removed from marketing mailing lists straight away! 

 

Watch the Small Print

January sales are a prime time for rushed decisions, however it is important before you hand your personal data over that you read the retailer’s Privacy Notice. In addition to this, many sign-ups bundle marketing consent with other uses, including quietly pre-ticking boxes for third-party data sharing. 

Make sure you take a second to:

  • Read the available information
  • Untick pre-selected boxes
  • Check whether your data will be shared with ‘partners’ or ‘third parties’
  • Look for clear explanations of how long your data will be kept 

 

Remember, Loyalty Schemes Aren’t Always Free

Loyalty cards and rewards apps can be great, but they can come with detailed tracking of your shopping habits. Over time, these profiles can reveal a lot about you! If you are signing up, it is reasonable to ask/check:

  • What data is being collected?
  • Is it being used just for reward collection, or is this also being used for targeted marketing?
  • Can you easily opt-out later?

If the answers aren’t clear, it is probably worth skipping that sign up. 

 

Beware of Fakes Sales and Phishing

Scammers are also too aware of the impact January Sales can have. Fake websites with fake sales and dodgy looking emails and ads are all too common. These are designed to scam you, and collect your data. Remember the saying, “if it’s too good to be true, then it probably is”. Stick to:

  • Well known/trusted retailers
  • Official websites (make sure to check the URL for “HTTPS”)
  • Emails you were expecting

Don’t let the pressure of a ticking clock for a discount code rush you into entering personal information, especially payment details.

 

Clean Up After the Sales

Once the sales are over and everything goes back to normal, it’s a good time to have a digital tidy up. Ensure you:

  • Unsubscribe from emails you don’t want
  • Delete accounts you only created for a discount
  • Review app permissions on your phone

 

A Final Thought

January is about fresh starts, not fresh spam. Enjoy the sales and grab the bargains, just be careful about who you give your personal data to. Being mindful now can save you a headache further down the line.

related posts

Alex Haslam

DPAS Data Protection Bulletin – July 2026

Welcome back to our monthly DPAS bulletin, where we cover the latest data protection news and developments from around the world.

Ever wondered how a routine government spreadsheet leak turns into a two-year covert court order? How about why the police might feel your mother-in-law’s contact details were key to national security? Have you ever pondered how many working weeks it takes to read a cookie banner? Whether Wall Street knows about your last GP visit? Or if you’re in Australia (g’day) why an AI is sending notes on your worst rashes to faraway cloud servers?

Read about all this and more in our latest DPAS Data Protection Bulletin.

Read More »
Alex Haslam

Root Cause Analysis: A Practical Guide

A practical guide to data breach reporting under UK GDPR, covering when you must notify the ICO, how to report a breach (and what to do if you don’t need to), and when affected individuals need to be told. Includes the key steps, timeframes, and documentation requirements to keep your organisation compliant.

Read More »
Alex Haslam

How to Report a Data Breach: A Practical Guide

A practical guide to data breach reporting under UK GDPR, covering when you must notify the ICO, how to report a breach (and what to do if you don’t need to), and when affected individuals need to be told. Includes the key steps, timeframes, and documentation requirements to keep your organisation compliant.

Read More »
Jack Penaligon

How to Respond to a Data Breach: A Practical Guide

This blog provides an overview of the practical steps organisations can take to reduce the impact of a data breach once it has been identified. It focuses on the actions that should be taken during the early stages of an incident to contain the breach, protect affected individuals, and meet regulatory requirements.

The article discusses a range of mitigation measures, including contacting unintended recipients of personal data, securing the deletion or recovery of exposed information, isolating compromised systems, and maintaining clear records of actions taken. It also explores the challenges posed by both digital and physical data breaches, highlighting the importance of balancing operational needs with data protection obligations.

Finally, the blog emphasises the value of preparation, explaining how established procedures, communication templates, and predefined response plans can help organisations respond more effectively and demonstrate accountability during a regulatory investigation.

Read More »

Get a Free Consultation