Privacy Policy

Last updated: 2 September 2026

Roast Radar ("we", "us", "our") operates the website roast-radar.com. This policy explains what personal data we collect, why, and how we handle it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is Roast Radar, contactable at privacy@roast-radar.com.

2. What Data We Collect

We collect minimal personal data:

• Usage data: anonymised page views and outbound click events (product URL, category, timestamp). No IP addresses are stored.
• Browser storage: your display and filter preferences (theme, sort order, and similar) are kept in your browser's local storage. We set no cookies of our own. See our Cookie Policy for details.
• Form submissions: if you send us a data correction or ask us to list a shop, we receive what you type into that form — including a contact email address, which is optional and only used to reply to you.

There are no visitor accounts and we never collect payment details. Apart from what you choose to type into a form, we do not collect names or email addresses.

3. Legal Basis for Processing

Our legal basis for processing usage data is legitimate interest (Article 6(1)(f) UK GDPR) — specifically, understanding how visitors use the site so we can improve it.

4. How We Use Your Data

• To understand which products and categories are popular
• To detect and fix errors in product data
• To improve the site's performance and relevance

We do not sell, rent, or share personal data with third parties for marketing.

5. Data Storage & Retention

Click event data is stored on Cloudflare R2 (data centres in the EU/UK) and retained for a maximum of 90 days before automatic deletion.

6. Third-Party Services

• Vercel: website hosting (processes server logs including IP addresses under their own privacy policy).
• Cloudflare: CDN and R2 storage (data processing per their privacy policy).
• Mapbox: map tiles on pages that show a map. Your browser requests these directly from Mapbox, which receives your IP address under their own privacy policy.
• Cloudflare Workers: our correction and shop-request forms post to a small service we run on Cloudflare. Submissions are held by us and are not shared with anyone else.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request erasure of your data
• Object to processing based on legitimate interest
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any right, email privacy@roast-radar.com.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.