Privacy Policy & GDPR

Last updated: 7 March 2026

1. Data Controller

The data controller responsible for your personal data is:

The Electronic High Street
Email: privacy@theelectronichighstreet.com
Website: www.theelectronichighstreet.com

2. What Data We Collect

Comparison & Shopping Service

When you browse our product comparison and shopping pages, we collect:

• Technical data (IP address, browser type, operating system)
• Pages visited and products viewed
• Referring website and search terms
• Click-through data to partner retailers (Amazon, eBay and others)

Cloud Backup Service

When you sign up for our cloud backup service, we additionally collect:

• Full name
• Email address
• Phone number (optional)
• IP address
• Chosen backup plan
• Livedrive account username and provisioning information

Blog & AI-Generated Content

Our blog content is generated using artificial intelligence (Claude by Anthropic). No personal data is used in the generation of blog content.

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Contract: To provide the backup services you have signed up for (Article 6(1)(b))
• Legitimate Interest: To improve our services, display relevant products, ensure security, and communicate service updates (Article 6(1)(f))
• Consent: For marketing communications, where applicable (Article 6(1)(a))
• Legal Obligation: To comply with applicable laws and regulations (Article 6(1)(c))

4. How We Use Your Data

Your personal data is used to:

• Display relevant product comparisons and recommendations
• Redirect you to partner retailer websites via affiliate links
• Create and manage your cloud backup account (if applicable)
• Provision your Livedrive backup service (if applicable)
• Provide technical support and customer service
• Send service-related communications
• Improve our website and services
• Comply with legal and regulatory obligations

5. Affiliate Links & Third-Party Retailers

Our affiliate partners include but are not limited to: Amazon, eBay, and other electronics retailers. We receive a commission on qualifying purchases made through our links but we do not share your personal data with these partners beyond the click-through itself.

6. Data Storage & Security

Backup service data: Files you back up are stored in secure UK and EU data centres operated by Livedrive, encrypted with 256-bit AES encryption both in transit and at rest. All data centres are ISO 27001 certified.

Account and website data: Stored in our secure database hosted in the UK. We implement appropriate technical and organisational measures including:

• 256-bit AES encryption for all backed-up data
• SSL/TLS encryption for all website traffic
• Secure password hashing (bcrypt)
• Two-factor authentication for admin access
• HSTS, X-Frame-Options, and other security headers
• Regular security audits and updates
• Access controls and monitoring

7. Data Sharing & Third Parties

We share your data only with:

• Livedrive (Maytech Technologies Ltd): Our cloud backup infrastructure provider, to create and manage backup accounts. Livedrive processes data in the UK/EU.
• Affiliate retailers: Click-through data only (no personal information shared).
• Payment processors: If applicable, to process subscription payments.
• Anthropic: Our AI content generation provider. No personal data is sent to this service.

We do not sell, rent, or trade your personal data to any third parties for marketing purposes.

8. Data Retention

We retain your personal data for:

• Active backup accounts: For the duration of your subscription plus 30 days
• Cancelled accounts: Up to 90 days after cancellation
• Enquiry data: Up to 12 months if no account is created
• Website analytics: Aggregated and anonymised, retained indefinitely
• Financial records: Up to 7 years as required by UK tax law

After these periods, your data will be securely deleted or anonymised.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@theelectronichighstreet.com. We will respond within 30 days.

10. Cookies

Our website uses essential cookies only:

• Session cookies: Required for form submissions and admin authentication. Temporary and deleted when you close your browser.
• CSRF tokens: Security cookies to prevent cross-site request forgery.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

11. International Transfers

Your data is stored and processed within the UK and European Economic Area (EEA). We do not transfer your personal data outside of the UK/EEA.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

14. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk

15. Contact Us

For any questions about this privacy policy or your personal data, please contact:

The Electronic High Street — Data Protection
Email: privacy@theelectronichighstreet.com