Privacy Policy

Data we collect

FF Info is an editorial site. We collect the minimum personal data required to operate the site and to respond to correspondence. This includes information you volunteer when contacting us (name and email address), and automatically recorded technical data such as IP address, browser user-agent and page paths, which is used to keep the site secure and to understand aggregate readership patterns.

We do not run user accounts, do not accept payments, and do not host operator sign-up funnels. Where a page discusses an operator, it does so as text; no personal data of yours is passed to any operator by this site.

Legal basis

Our legal basis under UK GDPR is legitimate interest for the operation and security of the site, and consent where required by the Privacy and Electronic Communications Regulations for non-essential cookies. Where you contact us, the legal basis for handling your message is your consent expressed by sending it.

Cookies

Essential cookies keep the site functioning. Analytics cookies are set only where you consent through the consent banner. We do not use behavioural advertising cookies. Detail on individual cookies is on our cookies page.

Third-party processors

Our web hosting provider processes technical data on our behalf under a written data-processing agreement. If we later add analytics or email marketing, we will name each processor here and describe the purpose. Any change is versioned so you can see what changed and when.

We do not sell personal data. We do not share personal data with operators discussed in our editorial content. Where a legal request compels disclosure, we will comply and, where lawful, notify the affected reader.

Retention

Contact correspondence is retained for two years from the last exchange, then deleted. Technical logs are retained for ninety days, then aggregated and the raw logs deleted. Editorial evidence retained for scoring is kept for the life of the ranking table and, where feasible, redacted of any personally identifiable information at the point of capture.

Your UK GDPR rights

You have the right to request access to your personal data, to have inaccurate data rectified, and to request erasure where the retention basis has expired. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). Requests reach us through the contact page and are handled within statutory windows.

International transfers

Our infrastructure is UK and EU hosted. Where an international transfer occurs — for example, if a processor is later added outside the UK/EU — we use standard contractual clauses or an equivalent lawful safeguard. Changes are versioned and dated.

Security

We follow proportionate security measures for an editorial site: TLS in transit, patched infrastructure, and least-privilege access to any personal data. No system is perfect; if we experience a breach that meets the notification threshold, we will notify the ICO within seventy-two hours and any affected readers as required.

Changes to this policy

Substantive changes to this policy are versioned with a date. The current version's date sits under the H1 above. Older versions are available on request.

Data controller

FF Info is the data controller for the purposes described above. Reach the controller through the contact page. 18+ Content on this site is intended for a UK adult audience.

Where personal data is included in editorial correspondence — for example, a reader mentions an account number when raising a complaint — we redact identifying details before archiving the correspondence for editorial audit purposes.

Automated decisions are not made on the basis of your personal data. This site does not profile visitors, does not run behavioural advertising, and does not construct a reader graph. Any future change to those baselines would be signposted in advance.

If you are exercising your UK GDPR rights on behalf of someone else, we may need reasonable evidence of your authority to act. That is a safeguard, not an obstacle; we would rather ask a clarifying question than release the wrong person's data.

Alex Ridley — Consumer Editor

Editorial oversight for privacy handling.