policy Legal HQ
policy

Privacy Policy

BudgetFitter® Privacy Policy. Understand how we collect, use, and protect your personal data in compliance with UK GDPR. Your privacy is paramount to our UK service.

Last updated: January 14, 2026

This Privacy Notice for FozDigital LTD, operating as BudgetFitter (“we,” “us,” or “our”), describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), which include:

  • Our website, budgetfitter.uk, and any of its subdomains (“Website”).
  • Our mobile application (“App”).
  • Our browser extension (“Extension”).
  • Our User Dashboard and account management system.
  • Our Ally Rewards programme, digital wallet, and payout systems.
  • Any other related services that refer or link to this privacy notice.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are the data controller responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us (e.g., activating a coupon, claiming a reward), the choices you make, and the features you use.

Do we process any sensitive personal information? We generally do not process sensitive personal information. We do not collect credit card numbers for billing purposes as our services are free to use.

Do we collect any information from third parties? We may collect limited information from public databases, social media platforms (for login), and Affiliate Networks/Partner Retailers to verify Ally Rewards claims (e.g., confirming a purchase occurred via our link).

How do we process your information? We process your information to provide, improve, and administer our Services, manage your account, verify reward eligibility, prevent fraud (such as self-referral abuse), and comply with law. We process your information only when we have a valid legal reason (Legal Basis) to do so.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties, such as our analytics partners, payout providers (e.g., Gift Card vendors), and partner retailers for transaction attribution. We are not responsible for the privacy practices of third-party shopping sites linked from our platform.

What are your rights? Depending on where you are located, applicable privacy law (such as UK GDPR) may grant you certain rights, including the right to object to automated decision-making regarding fraud checks.

How do you exercise your rights? The easiest way to exercise your rights is by visiting your User Dashboard settings, submitting a data request through our contact form, or by contacting us at [email protected]. UK residents also have the right to complain to the ICO.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION? (LEGAL BASES)
  3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  4. HOW DO WE USE COOKIES AND TRACKING TECHNOLOGIES?
  5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
  6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
  7. HOW LONG DO WE KEEP YOUR INFORMATION?
  8. DO WE COLLECT INFORMATION FROM MINORS?
  9. WHAT ARE YOUR PRIVACY RIGHTS?
  10. CONTROLS FOR DO-NOT-TRACK FEATURES
  11. DO WE MAKE UPDATES TO THIS NOTICE?
  12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us to create your account, track your savings, and process your rewards.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us, when you participate in activities on the Services (such as our Ally Rewards Programme or deal alerts), or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services. The personal information we collect may include the following:

  • Identity Data: First name, last name, username.
  • Contact Data: Email addresses.
  • Payout Information: Email addresses associated with PayPal accounts or digital gift card delivery (we do not collect bank account numbers directly).
  • Ally Reward Data: Transaction values, order dates, and retailer names required to verify your reward eligibility.
  • Content Data: User-generated content (reviews, deal comments, saved favorites).

No Payment Collection Data. Since BudgetFitter is a free service, we do not collect credit card numbers, billing addresses, or CVV codes for subscription purposes.

Information automatically collected

In Short: Some information — such as your IP address, browser characteristics, and device interactions — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services (Website, App, or Extension). This information does not reveal your specific identity (like your name) but may include device and usage information, such as your IP address (which we may trim or anonymize), browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location data, information about how and when you use our Services, and other technical information.

This information is primarily needed to:

  • Maintain the security and operation of our Services (including fraud detection via Cloudflare Turnstile).
  • Verify geographic eligibility for specific deals or Payout methods (e.g., UK-only rewards).
  • Affiliate Tracking: Ensure that your clicks on coupons are correctly attributed to BudgetFitter so that we can earn the commission that funds your Ally Rewards.

2. HOW DO WE PROCESS YOUR INFORMATION? (LEGAL BASES)

In Short: We process your information to provide our Services, relying on valid legal bases such as Contract Performance, Legitimate Interests, Legal Obligation, and Consent.

We process your personal information for the following purposes, underpinned by specific legal bases under GDPR/UK GDPR:

  • Account & Service Delivery (Legal Basis: Performance of a Contract): We process your identity and contact data to create your account, provide access to the User Dashboard, and sync your saved deals across devices (App/Web).
  • Ally Rewards Administration (Legal Basis: Performance of a Contract): We process your transaction data to verify your purchases with retailers, calculate points/cashback, and execute payouts to you.
  • Fraud Prevention & Security (Legal Basis: Legitimate Interest): We process technical data (IPs, device info) to detect fraudulent reward claims, prevent multi-account abuse, and ensure the security of our platform.
  • To generate aggregated statistical data (Legal Basis: Legitimate Interest): We may process and aggregate your data in an anonymous form to analyze shopping trends and improve our deal algorithms.
  • Communication & Support (Legal Basis: Legitimate Interest): We process your data to send you administrative information (e.g., “Reward Approved” notifications) and respond to your support requests.
  • Marketing & Personalisation (Legal Basis: Consent): With your explicit consent, we process data to send you newsletters or deal alerts tailored to your shopping preferences.
  • Tax & Legal Compliance (Legal Basis: Legal Obligation): We retain records of rewards paid out to comply with UK tax laws and financial regulations.

Data Breach Procedures: In the unlikely event of a data breach that compromises your rights and freedoms, we are committed to notifying you and the relevant supervisory authority (ICO) within 72 hours of becoming aware of the breach, in accordance with applicable law.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with specific third parties.

We may need to share your personal information in the following situations:

  • Service Providers: We share data with third-party vendors who perform services for us, such as:
    • Analytics providers (e.g., Google Analytics, with your consent)
    • Hosting and infrastructure providers (e.g., Cloudflare, for security and CDN)
    • Email service providers for transactional and marketing communications
    • Payout providers (e.g., Gift Card vendors) for reward fulfillment
  • Partner Retailers & Affiliate Networks: We may share specific transaction identifiers (Transaction IDs, Order Amounts) with partner retailers to verify Ally Rewards claims. This is strictly for attribution purposes—to confirm that a purchase was completed through our link.
  • Business Transfers: We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Legal Requirements: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, or legal processes.

Third-Party Websites and Links: Our Services contain links to third-party retailers. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check their policies before you submit any personal data to these websites.

4. HOW DO WE USE COOKIES AND TRACKING TECHNOLOGIES?

In Short: We use cookies and affiliate tracking technologies to collect and store your information, managed through our Consent Management Platform.

We use cookies and similar tracking technologies to gather information when you interact with our Services. Our use of these technologies is governed by the consent you provide via the cookie banner that appears on your first visit.

Affiliate Tracking Links: When you click on a “Get Deal” or “Activate Reward” link on BudgetFitter (or via our Browser Extension), we use tracking cookies or similar technologies to trace your journey to the retailer’s website. This tracking is essential for the operation of the Ally Rewards programme and for us to provide the service for free.

Specific information about the technologies we use is detailed in our dedicated Cookie Policy. You can change your preferences at any time using the “Manage Cookie Preferences” link in our website’s footer.

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services may offer you the ability to register and log in using your third-party social media account details (like Google or Apple logins). Where you choose to do this, we will receive certain profile information about you from your social media provider (typically name and email). We will use the information we receive only for the purposes that are described in this Privacy Notice and to create your account.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located globally through various hosting and infrastructure providers. If you are accessing our Services from outside the United Kingdom, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information (such as cloud providers or affiliate networks), in the UK, the European Economic Area (EEA), the United States, and other countries.

If you are a resident in the EEA or UK, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. We will however take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Account Deletion & Reward Forfeiture: When you request account deletion, we prioritize your data rights while protecting you from accidental loss:

  • Immediate Deactivation (Day 0): Your account is deactivated immediately. You will lose access to your User Dashboard and any accrued Ally Rewards that have not been withdrawn.
  • 30-Day Grace Period: We hold your data in a suspended state for 30 days. This safety window allows you to restore your account and rewards if the deletion request was a mistake.
  • Permanent Erasure (Day 30): If no restoration request is made within 30 days, your account and all associated personal data are permanently deleted from our systems. Warning: Any remaining Ally Rewards balance will be permanently forfeited at this point.
  • Long-Term Inactivity (Auto-Deletion): To ensure we do not hold data for users who no longer use the service, accounts that have remained inactive (no login, no app usage, no email engagement) for a continuous period of 24 months will be scheduled for deletion. We will attempt to notify you via email 30 days prior to permanent erasure.
  • Legal Retention: Transaction records (specifically regarding rewards paid out to you) are retained for 7 years in accordance with UK tax law (HMRC) and fraud prevention requirements. This data is kept in a restricted archive and is not used for marketing.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to persons under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at [email protected].

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you have rights that allow you greater access to and control over your personal information.

In some regions (such as the UK and European Economic Area), you have rights that allow you greater access to and control over your personal information. These may include the right to:

  • Request access to your personal information and obtain a copy of it.
  • Request correction of inaccurate or incomplete personal information.
  • Request erasure of your personal information in certain circumstances.
  • Restrict the processing of your personal information.
  • Withdraw your consent at any time (where processing is based on consent).
  • Right to Object to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing (including profiling), specifically regarding our anti-fraud checks for the Ally Rewards programme (e.g., if your account is automatically flagged for suspicious referral activity), if such decision produces legal effects concerning you or similarly significantly affects you. You may request a manual human review of such decisions by contacting support.

US Residents: If you are a resident of the United States, depending on your state of residence (e.g., California, Virginia), you may have specific rights regarding access, deletion, and “Do Not Sell” requests. While BudgetFitter primarily operates under UK/GDPR standards which often exceed US requirements, you may contact us to exercise these rights.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification via email or the App. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at [email protected] or contact us by post at:

FozDigital LTD
124 City Road
London, EC1V 2NX
United Kingdom

Right to Complain (ICO): If you are a resident of the UK and you believe we are unlawfully processing your personal information, you also have the right to complain to the UK data protection supervisory authority, the Information Commissioner’s Office (ICO). You can visit their website at https://ico.org.uk/.

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please:

  • Log in to your User Dashboard and visit your account settings page.
  • Submit a request through our contact form.
  • Email us directly at [email protected].

We will respond to your request within 30 days in accordance with applicable data protection laws.