Privacy Policy

1. Who we are and how to contact us

Technology Test Solutions Ltd ("Technology Test Solutions", "the Company", "we", "us", or "our") is the data controller for CompareCityCosts.com. We operate the Platform as a trading name dedicated to cost-of-living comparisons, editorial content, and subscription services.

• Registered office: 54 Caldbeck Avenue, Worcester Park, KT4 8BH, United Kingdom
• Company number: 10760189
• Contact: legal@comparecitycosts.com

2. Data we collect

We collect information that is necessary to operate the Platform and deliver services. The following categories describe the primary data we process:

• Account data: name, email address, subscription plan, usage preferences, and communication history.
• Usage and analytics data: pages visited, time spent, feature interactions, error logs, and device/browser information.
• Cookies and similar technologies: identifiers stored in your browser to remember preferences and track consent.
• Payment metadata: Stripe transaction identifiers and status updates necessary to administer subscriptions (we do not store full payment card details).

3. Children's data

CompareCityCosts.com is not intended for individuals under the age of 16. We do not knowingly collect or solicit personal data from children. If we become aware that we have unintentionally collected data relating to a child under 16, we will delete that information as soon as reasonably possible. Please contact us at legal@comparecitycosts.com if you believe we hold such data.

4. Lawful basis for processing

We rely on these legal bases under the UK GDPR:

• Contract: to deliver subscriptions, process payments, and maintain your account.
• Consent: for marketing communications and certain non-essential cookies. You can withdraw consent at any time.
• Legitimate interests: to improve the Platform, prevent abuse, respond to enquiries, and protect the business.

5. Third-party processors

We share the minimum personal data with processors who support the Platform:

• Stripe: payment processing and billing.
• Supabase: data storage, authentication, and real-time features.
• Analytics tools: providers such as Plausible, Google Analytics, or similar, to understand usage and improve the Platform.

We require processors to act only on our instructions, implement adequate security controls, and keep data confidential.

6. International data transfers

Some processors store or access data outside the UK and European Economic Area. When this happens we rely on adequacy decisions, Standard Contractual Clauses approved by the UK government, or other appropriate safeguards. You can request details of the safeguards by contacting legal@comparecitycosts.com.

7. How long we keep your data

We retain personal data only for as long as necessary for the purposes described:

• Account and subscription data: for the duration of your relationship plus 24 months to comply with financial record-keeping obligations.
• Support and correspondence: for 12 months unless an ongoing issue requires a longer period.
• Analytics data: aggregated or pseudonymised data may be kept for up to 24 months.

When data is no longer needed, we delete it or anonymise it so it cannot be linked to you.

8. Your rights

Under the UK GDPR you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure where there is no lawful reason for further processing.
• Object to or restrict processing for direct marketing or legitimate interests.
• Request portability of data you provided directly.
• Withdraw consent where processing relies on consent.

To exercise any right or if you have a complaint, contact legal@comparecitycosts.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

9. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects for you. Some platform features rely on algorithms to personalise content, but these are monitored by humans and do not replace personalised advice.

10. Data breach notification

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office without undue delay and, where feasible, within 72 hours of identifying the breach.

We will also inform you of the nature of the breach, the categories of data affected, the steps we are taking to contain and mitigate its effects, and the measures you can take to protect yourself.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will publish the changes on this page with a revised "Last updated" date.