Privacy Policy
Last updated: 7 July 2026
This policy explains what personal data FindBroadband collects, why we collect it, who we share it with, and the rights you have over it. We comply with the UK GDPR and the Data Protection Act 2018.
Find Platforms Ltd (trading as FindBroadband), company number 17163190, registered at 37 Fyfields, Pitsea, Basildon, SS13 1HJ, England, is the data controller for the personal data described in this policy. You can contact us about anything in here at hello@findbroadbanddeals.com.
Depending on how you use the site, we may hold:
- Account data: your name and email address. Your email is stored encrypted at rest.
- Address data: the postcode, full address and UPRN you give us, so we can check which deals are actually available at your specific property.
- Profile data you choose to add: your current broadband provider, contract end date, what you currently pay, and your marketing preferences.
- Activity data: speed tests you run, deals you save, outage and notification preferences, and a log of key actions (such as saving a deal) so we can show you useful follow-ups.
- Email metadata: the timestamps and types of emails we have sent you. We do not store the body content of those emails.
- Technical data: your IP address, device and browser information, and cookie identifiers, collected when you visit the site (see the Cookies section below).
- Running the service — signing you in (the magic-link email), showing deals at your address, and sending service emails such as sign-in links, account-change and deletion confirmations, and data exports. Lawful basis: UK GDPR Article 6(1)(b), necessary to provide the service you signed up for.
- Marketing emails — cheaper-deal alerts at your address, renewal heads-ups, and our newsletter. Lawful basis: UK GDPR Article 6(1)(a), your consent. You can withdraw consent or change which categories you receive at any time from your account settings, without affecting anything else.
- Analytics and advertising measurement — understanding how the site is used so we can improve it, and measuring which of our adverts led people to visit or click through to a deal. Lawful basis: your consent, captured through our cookie banner. Advertising measurement only runs if you accept advertising cookies.
We never sell your data. We use the following service providers, each receiving only what it needs to do its job:
- Supabase — database and authentication. Hosted in the EU (Ireland).
- Vercel — application hosting. Primary region London, with a global edge network.
- Resend — delivers our emails (sign-in links, account notices, and any marketing you opt into). Based in the US.
- Klaviyo — marketing email and segmentation. Only receives your data if you opt in to marketing. Based in the US.
- Sentry — error monitoring. Hosted in the EU (Frankfurt).
- Google Analytics, Microsoft Clarity and CookieYes — analytics and consent management, which only run with your consent.
- Meta (Facebook) — advertising measurement. If you accept advertising cookies, we share limited data (your IP address, browser and device information, and ad-click identifiers) with Meta, both through the Meta Pixel in your browser and directly from our servers, so we can measure which of our adverts led to a visit or a clickout. This only runs with your advertising consent. Based in the US.
When you click through to a broadband provider, you leave our site. From that point the provider's own privacy policy applies, not ours.
Some of our providers are based outside the UK. Transfers to the EU rely on the UK's adequacy decision. Transfers to US-based providers (Resend, Klaviyo, Meta) rely on the UK Extension to the EU-US Data Privacy Framework (the "UK-US Data Bridge"). In each case your data receives a level of protection equivalent to that required under UK law.
We do not collect special category data (such as data about your health, race, religion, political opinions, or sexual orientation). The information we hold is ordinary personal data only.
We keep your data for as long as you have an account. When you delete your account we stop using your data immediately and permanently erase it after a 30-day recovery window, during which you can restore your account with a single click. Aggregated or anonymised analytics, which can no longer identify you, may be kept for longer.
We use industry-standard safeguards including encryption in transit, encryption of stored email addresses at rest, access controls, and reputable infrastructure providers. No system is perfectly secure, but we take the protection of your data seriously.
Under UK GDPR you have the right to access, correct, delete, restrict, object to, and port your personal data (Articles 15 to 21). Most of this is self-service from your account settings; for anything else, email hello@findbroadbanddeals.com and we will respond within 30 days. If you are unhappy with how we have handled your data you can complain to the ICO at any time at ico.org.uk/make-a-complaint, though we would appreciate the chance to put things right first.
We use cookies and similar technologies. You can review and change your preferences at any time using the cookie banner. See our Cookie Policy at /cookies for the full detail.
We may update this policy from time to time. We will update the date at the top, and where a change materially affects how we use your data we will let you know by email where appropriate.
For any question about your data or this policy, email hello@findbroadbanddeals.com or write to Find Platforms Ltd, 37 Fyfields, Pitsea, Basildon, SS13 1HJ, England.