Privacy Policy

1. Information we use

• Account information: your email address, account identifier, sign-in records and any profile information you provide. If you choose Google sign-in when available, Google supplies the identifiers and basic profile details authorised during that sign-in.
• Preferences: whether you want member alerts, and any search or brand preferences you save when those features are available.
• Support messages: the details you send when asking for help or exercising your privacy rights.
• Technical information: hosting and authentication services may process your IP address, browser or device information, request times and errors to serve and protect the website.

We receive information directly from you, from your use of the website, and from a sign-in provider you choose. You can browse the public pages without creating an account. An email address and sign-in information are needed to provide an account; optional profile details are not.

Checkout currently uses demonstration data. It does not collect a real card payment. Before paid subscriptions or live alert delivery begin, we will update this notice to explain the actual billing and delivery data involved.

2. Why we use it

• To provide the account and features you request: we use account information and preferences to sign you in, save your choices and answer service questions. Our lawful basis is performing our agreement with you, or taking steps you request before entering it.
• To keep the service reliable and secure: we use relevant technical records to diagnose failures, prevent abuse and investigate suspicious activity. Our lawful basis is our legitimate interest in running a secure service, balanced against your rights.
• To meet legal duties: we retain or disclose information where a law requires it. The lawful basis is that legal obligation.
• For optional marketing, if introduced: we will explain the proposed use and seek consent where required. Turning on member alerts is not consent to unrelated marketing.

We do not sell personal information. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. Listing filters help organise results; they are not decisions about your eligibility for credit, employment or similar services.

3. Who helps us provide RackRadar

Information is shared as needed for the function you use:

• Railway hosts the website and processes requests and operational logs.
• Supabase provides account authentication and the database for member records and preferences when you sign in.
• Google handles its part of sign-in if you choose that option and processes information under its own privacy policy.
• Professional advisers or public authorities may receive relevant records where needed to meet a legal duty or establish or defend a legal claim.

Stripe is planned for future payments; it is not processing the demonstration checkout. Live notifications and member reviews are also separate features. We will explain their recipients and any public disclosure before collecting data for them.

If you follow a marketplace link, you leave RackRadar. That marketplace controls its own collection of information and any purchase you make there.

4. Cookies and browser storage

Sign-in uses session cookies to authenticate requests and keep your account signed in. Their lifetime depends on the session settings; they expire or are replaced as your session changes. Blocking these cookies may prevent account features from working.

When you choose light or dark mode, the website stores that choice in your browser’s local storage under theme. It stays there until you change the choice or clear the site’s data. It is used to remember the appearance you chose, not to track you across websites.

This version of RackRadar does not include advertising pixels or analytics trackers. If that changes, we will explain the technology and provide any consent controls required before it is used.

You can delete stored information or restrict storage through your browser settings. Clearing all RackRadar site data also removes your saved theme and may sign you out. Provider websites you visit separately have their own storage settings.

Draft detail to complete: the owner must confirm the appropriate consent or objection control for remembering an appearance preference between visits. Browser settings alone are not presented here as proof that this requirement has been met.

5. How long information is kept

Retention depends on what the information is needed for:

• Account information and preferences are needed while your account remains open. When an account is closed, information should be deleted or anonymised unless there is a specific continuing need.
• Support messages are kept while an enquiry is being handled and for any necessary follow-up or dispute.
• Security logs are kept for the period needed to investigate errors or abuse. Providers may retain backups separately from active records.
• If paid billing starts, necessary transaction records may need to be kept for accounting, tax or legal claims even after an account closes.

Draft detail to complete: the owner must confirm the actual log and backup retention settings and the account-deletion process. This draft does not promise an automatic deletion deadline that has not been implemented.

6. Where information is processed

Using a UK-facing website does not mean all its information stays in the UK. Hosting, authentication and sign-in providers may process data in other countries, including through support staff and subprocessors.

Draft detail to complete: the owner must confirm the selected service regions, relevant countries and transfer safeguards, and how you can obtain details of those safeguards. We do not currently claim that storage is UK-only or that a particular transfer arrangement has been verified.

7. Your choices and rights

Depending on the circumstances, you can ask for access to your personal information, corrections, deletion, restrictions on its use, or a portable copy. You can object to processing based on legitimate interests, and to direct marketing. Where we rely on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

Use the privacy contact below once it is confirmed. We may need to verify your identity before sharing or changing account information. We will explain any legal limits on a request and respond within the time required by data protection law.

You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. You do not have to contact us first to exercise that right.

8. Changes to this policy

We will update the date and wording when the service or its use of information changes. Material new uses will be explained before they begin, with fresh consent requested where required.

For the service and subscription rules, read our Terms of Service.