Privacy

Who answers

• Controller: T&T Consulting Business, LLC, 13575 58th St N, Suite 200, Clearwater, FL 33760, United States. It decides what is stored and what for.
• Representative in the European Union (Article 27 of the General Data Protection Regulation): Tudor Adriatic d.o.o., Zrinjsko-Frankopanska 62, 21000 Split, Croatia (OIB 58945974675, MBS 060502392). Write there if you prefer a contact inside the Union.
• For anything on this page, including exercising your rights: legal@tallyprice.com.
• There is no data protection officer, and our case does not require one: we do not process data at scale or special categories, and what a visit leaves behind does not identify anyone.

What we store, field by field

Clicks to shops. When you press an offer button, our server writes one row with: the offer, the product, the shop, the category, the price market, the page you left from, the channel you arrived by, the domain you were on, the country Cloudflare reports, and the date and time.

• What that row does not hold: your IP address, your browser, your operating system, any device fingerprint and any identifying cookie. There is no way for us to tell that two clicks came from the same person.
• To stop click fraud, the site processes your IP address and browser in memory for one hour, mixed with a random value, to spot bursts that no person makes. They are not stored anywhere and are gone when the hour passes or the server restarts. Lawful basis: legitimate interest in not charging shops for clicks that do not come from people.
• What for: to know which categories pay for the site and which do not, and to reconcile what an affiliate network pays us against what left from here.
• Lawful basis: legitimate interest (Article 6(1)(f)). The interest is measuring a business that lives on commission; the impact on you is nil because the row does not point at you.
• Retention: twenty-four months. That is how long a commission can be revised or chased, and it is what lets us compare a season against the same season a year earlier.

Commissions reported by the networks. Each sale a network credits to us arrives with: the network, its transaction number, the click identifier, the shop, the market, the sale amount, the commission, the currency, the status (pending, approved or declined) and the date.

• What does not arrive: your name, your email, your address, your payment method or what was in the order. The network does not send it and we do not ask for it.
• How it is matched to the click: when you leave for the shop we add a random identifier of the click to the address, and the network returns it with the sale. That identifier is a number of ours, not an identifier of yours.
• Lawful basis: legitimate interest in being paid and, once paid, the legal obligation to keep accounting records.
• Retention: the period the company's applicable accounting and tax rules require, counted from the close of the financial year.

Following prices. If you ask to follow a price, we store your email address, the language and market of the site where you signed up, your time zone, the time you want your summary, the products you follow, the target price of each one if you set it, the price it had on the day you started following it, and the record of the alerts we have sent you.

• What is not stored: a password (there is none), your IP address, and no measurement of where you go inside the site.
• Lawful basis: your consent (Article 6(1)(a)), given when you ask for the link and confirmed when you use it. Withdraw it whenever you want from your panel or from the footer of any email, in one click and without signing in.
• Retention: until you unsubscribe, or twelve months without opening your panel. In that case we email you fourteen days before and then the whole account is deleted. The record of alerts sent is kept for twelve months. If you ask for a link and never use it, what was noted is deleted within a day.
• The list of what you follow is not used for advertising, is not handed to any shop or network, and is not matched against the click log.
• Deleting everything: the "Delete my account and everything of mine" button in your panel, or the unsubscribe link at the foot of any email. It deletes right away and for real: no row with your address is left.

Telegram alerts. If you tap "Alert me on Telegram" on a product page and open our bot, we store the number Telegram uses to identify your chat with the bot, the language, the products you follow there, their market, the reference price of each one and when we last wrote to you.

• What is not stored: your name, your Telegram username or your phone number.
• Lawful basis: your consent (Article 6(1)(a)), given when you open the bot from a product page. You withdraw it by sending /stop to the bot, or by blocking it.
• Retention: until you unsubscribe. Whatever is unsubscribed is deleted for good after thirty days.
• Telegram sees the messages the bot sends you, as it sees any message on its service.

Emails you send us. They sit in the mailbox with whatever you put in them.

• Lawful basis: legitimate interest in answering you. If your email is a rights request, the basis is our legal obligation to answer it.
• Retention: until the matter is settled and twelve months after. Rights requests are kept as long as we need to be able to show that we answered.

Technical logs. The server and Cloudflare log requests, IP address included, so the site works and abuse and attacks can be stopped.

• Lawful basis: legitimate interest in the security of the service.
• Retention: the short period that purpose needs. They are not used to measure audience and they are not joined to anything above.

Who else sees anything

• Cloudflare, as delivery network, protection and outbound tunnel. It sees every request, including your IP address, before it reaches us. It is the only party that sees your IP.
• Zoho, the mail provider for both domains and, through its ZeptoMail service, the one that sends the follow-price emails. It sees whatever you write to us, and your address and the content of the alerts we send you.
• Affiliate networks, which receive the click identifier inside the outbound link. Kelkoo also receives the address of the product page you leave from, which is how it knows which site the click came from. We send them nothing about you. What happens once you are inside the shop is governed by that shop's and that network's policies, not ours.
• Nobody else. We do not sell data, we do not hand it to advertisers, and no third-party measurement tool is loaded on the page.
• The servers holding the site and the database are our own, on our own premises. The database is not hosted in any provider's cloud, and it is backed up daily with restores tested.

Data outside the European Economic Area and the United Kingdom

• T&T Consulting Business, LLC is based in the United States, so part of the processing happens there, as it does with the providers above.
• Those transfers rely on the European Commission's standard contractual clauses, on the UK addendum where it applies, or on the adequacy framework each provider holds.
• Ask us in writing which safeguard covers which provider and we will tell you.

If you are in the United States

• We do not sell your personal information and we do not share it for cross-context behavioural advertising, in the sense California and other state privacy laws give those terms. There is no targeted advertising here, no data broker behind the site, and no "do not sell" switch because there is nothing to switch off.
• We do not use sensitive personal information, and we do not process anything for a purpose other than the ones listed above.
• Residents of states with a privacy statute can write to legal@tallyprice.com to ask what we hold about them, to have it corrected or deleted, and we will answer. Exercising a right never gets you a worse service here, because the service does not depend on any of it.

Security

• Outbound links to shops are marked so that your browser does not tell the shop which page you came from.
• The database and the server sit on a private network with no ports open to the internet: all traffic comes in through the Cloudflare tunnel.
• No system is perfect. If a breach ever affected you, we would notify the authority and you within the periods the Regulation sets.

Your rights

• You can ask for: access to whatever we hold about you, correction of what is wrong, erasure, restriction of processing, objection to what we do on the basis of legitimate interest, and portability of what you gave us. You can also withdraw consent at any time, without affecting what was done before.
• How: an email to legal@tallyprice.com saying what you want. There is no form. If what you are asking about can only be found through your email address (your follow-price account, say), write from that address or tell us which one it is.
• When we answer: within one month. A complex request can take two months more, and we would tell you why inside the first month.
• What we cannot do, said plainly: the click log holds nothing that identifies you, so there is nothing of yours in it to find, fix or delete. It is information about products and shops, not about people.
• If you think we are getting it wrong you can complain to the Information Commissioner's Office in the United Kingdom, or to the supervisory authority of the EU country where you live. We would rather you wrote to us first, but it is not a requirement.

Children

The site is not aimed at children. We do not knowingly collect anything from a child under thirteen, or under sixteen in the European Union. If you believe a child left an email address to follow prices, write to legal@tallyprice.com and we delete it without asking questions.

Automated decisions and profiles

• There is no profiling and no automated decision-making with legal effects on anyone.
• What you see does not depend on who you are: the order is decided by total price and is explained in full on the how we rank page. Two different visitors in the same market see exactly the same thing.
• The prices we show do not change with your device, your location within a market, or how many times you have looked at a product.

Changes to this page

When this page changes it is because the code changed, not the other way round. The date of the last revision is at the bottom, and when a change affects what we collect or the basis we collect it on, it is said at the very top and not in a line at the end.