Privacy Policy

Regulatory Framework

This site is operated from the Netherlands and targets consumers in the United Kingdom. As a result, two data protection regimes apply:

• •UK GDPR — applies because this site targets UK consumers (Article 3(2))
• •EU GDPR — applies because the site operator is established in the Netherlands (Article 3(1))

The Information Commissioner's Office (ICO) is the UK supervisory authority. The Autoriteit Persoonsgegevens (AP) is the Dutch/EU lead supervisory authority.

What Data We Collect

Depending on how you use this site, we may collect the following information:

• •IP addresses
• •Browser and device information
• •Pages visited and time spent on the site
• •Cookie identifiers from analytics and advertising services
• •Information submitted via contact forms — name, email address, and message content
• •Your email address, if you subscribe to our newsletter or a dataset download
• •An anonymous browser push token, if you turn on price-drop alerts

The Things We Run Ourselves

Beyond the third-party services above, the site has a small amount of plumbing of its own, hosted on Cloudflare. Here is exactly what each piece stores:

• •Newsletter sign-up. If you give us your email address, it is stored in Cloudflare Workers KV and used only to send you the newsletter you asked for. We never sell or share it. Legal basis: consent. You can unsubscribe at any time via the link in any email or by contacting us, and we'll delete it on request.
• •Price-drop alerts (web push). If you enable alerts, your browser generates an anonymous push subscription token, which we store in Cloudflare Workers KV so we can send the notifications. It contains no name, email or browsing history. Legal basis: consent. Revoking the notification permission in your browser invalidates the token permanently.
• •Outbound click measurement. When you click a link to a retailer, we record which page the click came from, which retailer it went to, and the time. That is all — no cookies, no IP address, no identifier that could link the click to you. Legal basis: legitimate interest in knowing which pages are useful.
• •Cloudflare Web Analytics. Cookieless, aggregate page-view counts with no personal identifiers and no cross-site tracking, provided by Cloudflare.

Third-Party Data Sharing

We share data with Google LLC for the purposes of analytics (Google Analytics 4) and advertising (Google AdSense). Google may transfer your data to the United States under Standard Contractual Clauses approved by the UK ICO.

We do not sell your personal data to any third party. We do not share it with any other organisation unless required to do so by law.

Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• •Access — request a copy of the personal data we hold about you
• •Rectification — ask us to correct inaccurate or incomplete data
• •Erasure — request that your data be deleted (“right to be forgotten”)
• •Restriction — ask us to limit how we process your data
• •Data portability — receive your data in a structured, machine-readable format
• •Object — object to processing based on legitimate interests
• •Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, contact us at our contact form. We will respond within one month as required by UK GDPR.