Privacy policy

Last updated August 2026. This policy explains what we collect and why, under UK GDPR and the Data Protection Act 2018.

Who we are

{{COMPANY_NAME}} ({{COMPANY_NUMBER}}), {{REGISTERED_ADDRESS}}, is the data controller. Contact: {{CONTACT_EMAIL}}.

What we collect

Outbound click logs (server-side): which product and supplier you clicked, timestamps, the page you came from, your search dimensions and quantity, a first-party session cookie ID, any UTM tags or Google click ID, and a hashed (not readable) version of your browser's user agent. No name, email or payment data.
Analytics via Google Analytics 4 and Google Tag Manager, and a Meta Pixel if enabled. These only run after you accept analytics cookies.
We do not offer accounts and we never take payment on this site.

Why (lawful bases)

Click measurement: our legitimate interest in understanding which suppliers we send traffic to and improving the service. The data is aggregate and does not identify you.
Analytics and advertising cookies: your consent, given through the cookie banner. You can withdraw it at any time.

Retention

Click logs are kept while they are useful for supplier reporting and then aggregated or deleted. Analytics retention follows Google's settings.

Who we share with

Google (analytics), Meta (pixel, when enabled), and our affiliate networks and their advertisers, who may set a cookie when you click through to a supplier. We do not sell personal data.

International transfers

Some processors (Google, Meta) may transfer data outside the UK under appropriate safeguards such as the UK addendum to the EU Standard Contractual Clauses.

Your rights

You can ask for access, correction, deletion, or object to processing based on legitimate interest. Email {{CONTACT_EMAIL}}. You can also complain to the Information Commissioner's Office at ico.org.uk.