Privacy Policy
1. Who we are
Gear Versus Tech (gearversustech.com) is a trading name of POLICYANDPLAY LTD, a company registered in England and Wales, company number 17253846. Our registered office is 7 Cosford Drive, Shortstown, Bedford MK42 0DQ, United Kingdom. We are the data controller for the personal data described here. We are registered with the Information Commissioner's Office (ICO), registration number ZC165321.
Contact: hello@gearversustech.com
2. What we collect and why
| Data | Purpose | Lawful basis | How long we keep it |
|---|---|---|---|
| Email address (newsletter form) | Send the weekly email: matchups, kit alerts, deal notes | Consent | Until you unsubscribe, then deleted within 30 days |
| Email address, product and optional target price (price alerts) | Send a confirmation email, then alerts when the price moves | Consent (you confirm by clicking the link in our email) | Until you stop your alerts. The stop link in every email deletes your address and all its alerts straight away. Requests you never confirm are deleted after 30 days |
| Name, email, topic and message (contact form, or emails to us) | Reply to you | Legitimate interests (answering the people who write to us) | 12 months after the last message |
| Photo and notes you upload to Studio | Generate and check an AI room concept for you | Contract (providing the feature you asked for) | We do not keep them. See "Studio" below |
| Purchase details for digital kits (name, email, payment confirmation) | Take payment, deliver the kit, send a receipt, handle refunds | Contract. Legal obligation for accounting records | 6 years, for tax and accounting |
| Retailer click log: retailer, product, the page you clicked from. No IP address, device details or name | See which products and pages are useful | Legitimate interests (running and improving the site) | 24 months |
| Anonymous page-view statistics (Cloudflare Web Analytics) | Understand which pages are read | Legitimate interests | Aggregated by Cloudflare. We do not receive personal identifiers |
| Technical request data (IP address, browser, page requested) | Serve the site, keep it secure, stop abuse | Legitimate interests | Up to 30 days in hosting logs |
| Studio anti-abuse data (Cloudflare Turnstile check, short-lived session) | Stop bots and limit how often Studio can be used | Legitimate interests | Session only, up to 1 hour |
The "My setup" shortlist on Studio, kit and room pages is saved only in your own browser. We never receive it.
3. Marketing emails
We email you about new matchups, kit alerts and deals only if you subscribe, and the basis is your consent. Every email has an unsubscribe link. You can also email us. If you buy a kit from us, we may tell you about similar kits under the "soft opt-in" rules, and you can opt out at any time. Price-alert emails are sent only for the products you chose to watch.
4. Who we share it with
We never sell personal data. These providers process data for us, or receive it so you can use a feature:
- Netlify (hosting, serverless functions, form storage; US)
- Supabase (database for product data, price alerts and the click log; stored in the EU, Ireland)
- Resend (sending confirmation, alert and newsletter emails; a US company, our emails are sent from its EU region in Ireland)
- Cloudflare (DNS, content delivery, Web Analytics and the Turnstile bot check; US)
- Replicate (AI image and text models used by Studio; US)
- Stripe (card payments for digital kits; US and Ireland). Stripe is also an independent controller of payment and fraud data.
- Google (Google Fonts, which loads the site's typefaces; your IP address is sent to Google when a page loads; US)
When you click a link to Amazon, eBay or another retailer, you leave our site. That retailer is then responsible for your data, and may set its own cookies. See their privacy policies. We may also share data where the law requires it.
5. International transfers
Some providers are in the US. We rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the ICO's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
6. Studio (AI room design)
When you press the button, your photo, the options you picked and any notes you typed are sent to Replicate to analyse the room, create a concept image and check the result. We do not save your photo or the concept on our servers. Replicate holds the files for a short time to run the job (currently about an hour), then deletes them. Do not upload photos showing people, documents or anything you do not want processed. Studio does not make automated decisions that have legal or similarly significant effects on you.
7. Retention
The periods are in the table in section 2. When a period ends we delete the data or make it anonymous.
8. Your rights
You can ask us to: give you a copy of your data (access); correct it; delete it; restrict how we use it; give it to you in a portable format; stop using it where we rely on legitimate interests (object). You can object to direct marketing at any time. Where we rely on consent, you can withdraw it at any time, and that does not affect what we did before. You also have rights around automated decisions. Email hello@gearversustech.com. We reply within one month.
9. Complaints
If you're unhappy with how we've handled your data, email hello@gearversustech.com with "Data protection complaint" in the subject. We'll acknowledge within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
10. Cookies
We do not use advertising or tracking cookies. Our analytics are cookieless. Full details are in our Cookie Policy.
11. Affiliate links
We earn commission when you buy through links to Amazon, eBay and Awin merchants. See our Affiliate Disclosure.
12. Children
This site is not directed at children under 13, and we do not knowingly collect their data.
13. Changes
If we change this policy we will update the date above. For material changes that affect you, such as a new way of using your email address, we will tell you first.