Black Friday and Cyber Monday: How to Shop Online Without Sacrificing Your Data Privacy

Black Friday and Cyber Monday arrive wrapped in urgency: countdown clocks, "only three left", texts about parcels you never ordered. Most of it is ordinary retail pressure. Some of it is fraud, and a good deal of the rest is data collection dressed up as convenience. You don't have to choose between a low price and keeping your personal information to yourself. A handful of habits — set up once, reused all season — will keep the discounts coming while your card number, inbox and browsing history stay where they belong.

Assume the offer that landed in your inbox is unverified

Sales season is peak phishing season, because a message about a delayed parcel or a cancelled order blends into the noise. Read each one as if a stranger wrote it, because often that is exactly what happened.

• Look at the actual domain, not the display name. "Amazon Customer Service" can sit cheerfully above amazon-billing-support.net without any contradiction between the two.
• Preview links before tapping. Hover on a computer, or press and hold on a phone, to see where a link really goes.
• Distrust urgency. Real retailers don't threaten to close your account in forty minutes. Pressure is the tool that stops you checking.
• Notice odd payment requests. Bank transfers, gift cards or cryptocurrency at a checkout are close to a guarantee of fraud, whatever the site looks like.
• Watch for post-purchase fakes. A scam email about "a problem with your order" is far more convincing when you did order something that week.

When in doubt, close the message and reach the shop the long way: type the address yourself or open the retailer's app, then check your order history there. If the offer is genuine, it will still be waiting.

Pay in a way that keeps your card number to yourself

The safest card number at a checkout is one that doesn't exist beyond that single purchase. Several options get you close to that.

Options worth knowing about

• Single-use virtual cards. Your bank issues a number, expiry date and security code tied to one merchant or one transaction. If it leaks afterwards, there is very little left to steal. Availability and features vary by bank and country, so check your issuer's app.
• Tokenised wallets. Apple Pay, Google Pay and similar services hand the shop a one-time token instead of your card number, so the retailer never holds the real thing.
• Credit rather than debit, where you have the choice. Dispute processes tend to be more forgiving, and the money isn't pulled straight out of your current account. Rules differ from country to country — your bank is the authority on what applies to you.
• Guest checkout. You give up order history and one-click reordering. In exchange, your card isn't stored on a small shop's server.

Whichever you choose, don't save payment details on unfamiliar sites. If a shop insists you store the card to complete a purchase, that's a reason to leave.

Reduce the tracking that follows you between shops

Retargeting works because pixels on product pages report back what you looked at. Some of it is harmless. Some of it follows you for months, across devices, long after the sale ends. You can cut most of it without breaking the web.

• Reject cookies where you're asked. "Reject all" does as much for you as "Accept all" does for them. Some banners hide the reject button behind a settings panel where you switch off each category — tedious, and worth the extra clicks.
• Block third-party cookies in your browser, and consider one that protects against tracking by default. Some pages will break; you can allow exceptions one site at a time.
• Stop automatic image loading in email. Marketing emails typically carry a tiny invisible pixel that tells the sender when and roughly where you opened it. Blocking remote images removes that signal.
• Use a separate address for shopping, so newsletters and offers don't flood your main inbox and a breach at one retailer doesn't point straight at your everyday account.
• Weigh up loyalty schemes. The points are real, and so is the profile built from your purchases over time. Join the ones you'll genuinely use.

Unsubscribing in January matters more than it sounds. Fewer emails means fewer chances to click the wrong link in a hurry.

Tighten your accounts before you shop

Give each shopping account a unique password, kept in a password manager rather than in your memory. A breach at one retailer then stays a problem at one retailer instead of opening your email. Switch on two-factor authentication, and prefer an authenticator app or a hardware key to text messages, since SMS codes can be intercepted.

Then spend ten quiet minutes on what you've already handed over: delete saved cards you no longer use, revoke access for apps you don't recognise, and reconsider any "sign in with" social login that shares more of your profile than you assumed. It's dull work, and it's the cheapest insurance available.

If something goes wrong, act quickly

1. Lock or freeze the card in your bank's app immediately. Speed matters more than certainty at this stage.
2. Call the number printed on your card or listed on your bank's own website. Never use contact details from the email or text that caused the worry.
3. Change the password on the affected account and on any site where you reused it, then sign out of all active sessions.
4. Keep everything: order confirmations, screenshots, sender addresses, timestamps. Dispute processes run on evidence.
5. Report the message to the brand being impersonated, and to your national fraud or consumer reporting body if your country has one.

If a disputed charge is significant, or a retailer and your bank are each pointing at the other, consumer protection services can explain your rights and the process. For anything beyond a small amount, getting proper advice is worth the time.

Shop the sales you actually came for

Most overspending and most bad clicks happen in the same state of mind: rushed. Decide what you want before the promotional emails arrive, and write it down. Compare two or three shops for that specific item rather than browsing a homepage and letting the discounts set the agenda for you.

If a deal looks extraordinary, wait an hour and check the returns policy, the delivery window and whether the shop is easy to contact. A retailer that's hard to reach is a retailer that's hard to get a refund from.

None of this requires technical skill or a new way of living. It requires a slightly slower pace at the checkout — an extra ten seconds to glance at the domain, choose the right card, and close the tab you didn't open on purpose. Do that, and the season's bargains cost you money and nothing else.

Photo: Mediamodifier / Pixabay