Privacy Policy

1. Data We Collect

Account Information

When you create an account, we collect:

• Your name
• Email address
• Password (stored securely using Argon2id hashing)

Search and Usage Data

When you use the Service, we may collect:

• Postcode searches you perform
• Fuel type preferences
• Stations you save as favourites
• Price monitors you create
• Search history and frequency of use

Technical Data

We automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent on the Service
• Device information

2. How We Use Your Data

We use your personal data to:

• Provide the Service -- process your fuel price searches and display relevant results
• Manage your account -- authenticate you, maintain your preferences, and manage your saved stations
• Send price alerts -- notify you when prices at your monitored stations meet your criteria
• Improve the Service -- analyse usage patterns to enhance features and fix issues
• Ensure security -- detect and prevent fraudulent or abusive activity

We do not sell your personal data to third parties. We do not use your data for marketing purposes unless you have given explicit consent.

3. Legal Basis for Processing

We process your data on the following legal bases:

• Contract -- processing necessary to provide the Service you have requested
• Legitimate interests -- improving the Service, ensuring security, and preventing abuse
• Consent -- where you have opted in to receive communications or alerts

4. Cookies

We use essential cookies to operate the Service. For full details about the cookies we use and their purposes, please see our Cookie Policy.

5. Data Retention

We retain your data as follows:

• Account data -- retained for as long as your account is active, plus 30 days after deletion to allow for recovery
• Search history -- retained for 12 months, then automatically deleted
• Price monitor data -- retained for as long as the monitor is active, deleted when you remove it
• Security logs -- retained for up to 12 months for fraud prevention

6. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• Where required by law or legal process
• With our hosting provider (Hostinger) for the purpose of operating the Service
• To protect the rights, safety, or property of Anglesey Digital or our users

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access -- request a copy of the personal data we hold about you
• Right to rectification -- request correction of inaccurate or incomplete data
• Right to erasure -- request deletion of your personal data ("right to be forgotten")
• Right to data portability -- request your data in a structured, machine-readable format
• Right to restrict processing -- request that we limit how we use your data
• Right to object -- object to processing based on legitimate interests
• Right to withdraw consent -- withdraw consent at any time where processing is based on consent

To exercise any of these rights, please email us at support@angleseydigital.co.uk with the subject line "Data Request". We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of sensitive data using AES-256-GCM
• Secure password hashing with Argon2id
• CSRF protection on all forms
• Rate limiting to prevent brute-force attacks
• HTTPS encryption for all data in transit

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

10. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at support@angleseydigital.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.