Privacy Policy
This policy explains how Atarna collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last updated: March 2026
1. Who We Are (Data Controller)
Atarna ("we", "us", "our") is the data controller responsible for your personal information. We are a price comparison and deal discovery platform.
If you have any questions about this policy or how we handle your data, you may contact us at: privacy@atarna.co.uk
2. What Data We Collect & Why
We collect only the data necessary to provide our service. This includes:
Account Data
Name and email address — used to identify your account and communicate with you.
Profile Data (optional)
Delivery address, phone number — used to pre-fill checkout forms and personalise your experience.
Payment Data
Last 4 digits of your card and expiry date only — for display convenience. Atarna does not process or store full card numbers. Payments are handled exclusively by Stripe.
Usage Data
Search history, price alert preferences — used to personalise recommendations, enable price tracking notifications, and improve the platform.
Referral Data
Referral codes, referrer email, and referred email — used solely to operate the member referral programme. This data is not shared with or sold to any third party.
Technical Data
Device fingerprint — a non-personal identifier derived from browser properties used solely to enforce fair trial usage and prevent abuse.
3. Lawful Basis for Processing
Under UK GDPR Article 6, we are required to identify a lawful basis for every type of personal data we process. Our lawful bases are documented below:
Name & Email Address
Contract Performance (Art. 6(1)(b))Necessary to create and operate your account and deliver the service you have signed up for.
Membership & Subscription Records
Contract Performance (Art. 6(1)(b))Necessary to manage your paid membership, process renewals, and determine your access level.
Billing Records (via Stripe)
Legal Obligation (Art. 6(1)(c))We are required to retain billing and transaction records for HMRC tax compliance purposes (typically 6 years).
Delivery Address, Phone
Consent (Art. 6(1)(a))You provide this information voluntarily to personalise your experience. You may delete it at any time from your Account page.
Card Display Details (last 4 digits, expiry)
Consent (Art. 6(1)(a))Stored at your discretion for display convenience only. Full card data is never held by Atarna — it is handled exclusively by Stripe.
Search History & Price Alerts
Legitimate Interests (Art. 6(1)(f))Used to personalise your recommendations and deliver price drop notifications. You can delete your search history or price alerts at any time.
Referral Data
Legitimate Interests (Art. 6(1)(f))Used solely to operate and attribute the member referral programme. Not shared with or sold to any third party.
Device Fingerprint
Legitimate Interests (Art. 6(1)(f))A non-personal browser-derived identifier used solely to prevent abuse of the free trial system. It does not track you across other websites.
Where we rely on legitimate interests, we have assessed that our use of your data does not override your fundamental rights and freedoms. You may object to any legitimate-interest processing by contacting privacy@atarna.co.uk.
4. How We Store & Protect Your Data
All personal data is stored on secure, encrypted infrastructure provided by Base44 (our platform provider), hosted within the European Economic Area (EEA) or with equivalent adequacy protections in place.
Access to personal data is strictly limited to authorised Atarna personnel only, and only where necessary for the operation of the service. We do not permit third-party access to your data for any commercial purpose.
Atarna does not sell, rent, trade, or otherwise transfer your personal data to any third party under any circumstances.
5. Data Retention
We retain your personal data only for as long as necessary:
- Active members: All profile data is retained for the duration of your active membership.
- On cancellation: Address, phone number, and card details are deleted immediately. Only your name and email are retained for legal record-keeping.
- On full erasure request: All data including name and email can be deleted upon written request (see Section 6).
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
To exercise any of these rights, please contact us at privacy@atarna.co.uk. We will respond within 30 days in accordance with UK GDPR requirements. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies & Local Storage
Atarna uses browser local storage (not tracking cookies) to remember your onboarding tour completion status and other non-personal UI preferences. No advertising or tracking cookies are set by Atarna.
Third-party services integrated into Atarna (such as Stripe for payments) may set their own cookies in accordance with their own privacy policies. We encourage you to review Stripe's privacy policy at stripe.com/gb/privacy.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to registered members via email before taking effect. The current version will always be accessible from the footer of the website.
Continued use of Atarna following any update constitutes acceptance of the revised policy.
For all data-related enquiries, contact: privacy@atarna.co.uk
To file a complaint with the UK supervisory authority: ico.org.uk/make-a-complaint
© 2026 Atarna. All rights reserved.
