This page explains what information we collect when you use ukof (this website), how we use it, and the rights you have under UK data protection law (the UK General Data Protection Regulation and the Data Protection Act 2018).
Who we are
HarrisonLILY Limited is the data controller for personal information collected through this website. You can contact us via the contact page.
What we collect — and why
1. Click events
When you click "Compare", "Buy", or any link that takes you from a product page to a merchant's website, we record:
- which offer you clicked (the product, price, and merchant)
- a one-way hashed version of your IP address — we use SHA-256 with a site-specific salt, so we can count unique visitors but cannot recover the original IP
- your browser's user-agent string
- the page that referred you (if your browser sent one)
- your country, derived from the hashed IP at the moment of the click (we don't store anything more precise)
- the timestamp of the click
We use this data to understand which merchants and products are popular, to improve rankings, and to verify commission reports from affiliate networks. The legal basis is our legitimate interest in operating and improving the comparison service.
2. Account information
If you create an account, we collect your name, email address, and a hashed password. We use this to authenticate you and to email you about your account. The legal basis is contract.
3. Contact form submissions
When you contact us, we keep the message you sent along with your name and email so we can reply and refer back to the conversation. The legal basis is your consent, which you can withdraw at any time by emailing us.
4. Operational logs
We keep short-lived server and error logs (typically less than 30 days) that may include request paths, response codes, and timestamps. These are used for debugging and security only.
What we don't do
- We don't sell your personal information to anyone, ever.
- We don't run third-party advertising trackers on this site.
- We don't take payment on this site — when you buy, you transact directly with the merchant on their website.
- We don't profile users beyond aggregated, anonymised click counts.
Affiliate networks and merchant tracking
When you click through to a merchant, you pass through an affiliate network's redirect (such as Awin). The affiliate network typically sets a tracking cookie on its own domain so it can attribute any subsequent purchase to us. We don't control these cookies, but you can read each network's privacy policy:
Once you arrive on the merchant's website, their privacy policy governs anything you do there — including any account you create or any payment you make.
Service providers we use
We rely on a small number of providers to run the service. They process data on our behalf:
- Hosting — UK-based servers running our application and database.
- Error monitoring — Sentry (sentry.io), receives application error stack traces; we configure it not to send personal data deliberately, but error context could incidentally include it.
- Email — used for transactional messages such as password resets and contact-form replies.
How long we keep data
- Account data: while your account is active, plus 30 days after deletion.
- Click events: rolled up into anonymous daily totals after 90 days; the original detail rows are then purged.
- Contact-form messages: 24 months unless you ask us to remove them sooner.
- Server logs: typically less than 30 days.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, ask us to correct or delete it, restrict or object to processing, and to receive a copy in a portable format. To exercise any of these, get in touch via the contact page.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk), which is the UK's data protection regulator.
Children
This service is not directed at children under 13. We don't knowingly collect personal data from children. If you believe a child has given us their data, please contact us and we will remove it.
Changes to this policy
We may update this policy from time to time. Material changes will be notified on this page with a new "last updated" date. If we make a change that affects how we use data you've already given us, we'll tell you by email if we have one for you.