Privacy policy
This policy explains what personal data SpecPrice (www.specprice.co.uk) collects, why, and what rights you have under the UK GDPR and the Data Protection Act 2018. Last updated 17 October 2026.
Who is responsible
The data controller is Brandon Cosgrove, trading as SpecPrice, in the United Kingdom. Contact for anything in this policy: brandon-omniroute@mail.grokbot.com.
What we collect and why
1. Newsletter and price alerts
If you sign up for the weekly newsletter, a category deal alert or a price-drop alert, we collect your email address plus what you asked to be alerted about: a tag naming the product or category, and an optional target price. Sign-ups are handled by Buttondown, our email provider, which also records technical details such as your IP address, when you signed up and whether you opened or clicked our emails.
- Lawful basis: your consent (UK GDPR Article 6(1)(a)). You can withdraw it at any time with the unsubscribe link in every email, or by emailing us.
- Retention: until you unsubscribe or ask us to delete it. After you unsubscribe we keep only what's needed to make sure we don't email you again.
- Where: Buttondown processes data in the United States under its data processing agreement, which uses Standard Contractual Clauses for international transfers.
2. Hosting, security and visitor statistics (Cloudflare)
The site is hosted on Cloudflare Pages. Like any web server, Cloudflare processes your IP address, browser type, the page requested and the time so it can deliver pages and block attacks. We only see aggregated statistics (for example, page views per day); we don't use tracking cookies, advertising trackers or profiles, and the site's own pages set no cookies.
- Lawful basis: our legitimate interests in running a secure, working website (Article 6(1)(f)).
- Retention: request logs are kept by Cloudflare for its standard short period; we keep only aggregated counts.
- Where: Cloudflare is a US company certified under the UK Extension to the EU-US Data Privacy Framework. See Cloudflare's privacy policy.
3. Fonts (Google Fonts)
Pages load fonts from Google Fonts, so your browser sends your IP address and browser details to Google when a page loads. Lawful basis: legitimate interests (consistent display of the site). See Google's privacy policy.
4. Affiliate links and cookies
Some links go to retailers through affiliate programmes, currently Amazon Associates (see our affiliate disclosure). SpecPrice itself sets no cookies. If you click an affiliate link, the retailer (for example Amazon) may set cookies on its own site to record that you came from SpecPrice, so we can earn a commission if you buy. That happens under the retailer's privacy and cookie policy, for example Amazon's privacy notice. We receive only anonymous reports (clicks, items sold, commission), never your name or details.
5. If you email us
We keep your email and message to reply and handle your request. Lawful basis: legitimate interests (answering you), or legal obligation for privacy requests. We delete correspondence when it is no longer needed, and within 2 years at the latest unless it relates to an ongoing matter.
What we don't do
We don't sell or rent personal data, show third-party ads, build advertising profiles or make automated decisions about you. Price data on the site comes from public retailer listings and contains no personal data.
Your rights
Under the UK GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to processing (including any processing based on legitimate interests); data portability; and to withdraw consent at any time without affecting earlier processing. To use any of these, email brandon-omniroute@mail.grokbot.com. We'll reply within one month and won't charge you.
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113.
Children
SpecPrice isn't aimed at children, and we don't knowingly collect data from anyone under 13.
Changes
If we change this policy we'll update the date at the top of this page.