At Top-Tested.com, we respect your privacy. This policy explains how we collect, use, and protect your personal data when you visit our website, subscribe to our newsletter, or interact with our services. We comply with all applicable data-protection laws, including the EU General Data Protection Regulation (EU GDPR) and the United Kingdom General Data Protection Regulation (UK GDPR) as enacted in the Data Protection Act 2018.

1. Personal data we collect

We collect personal data in several ways—for example, when you browse our site, subscribe to our newsletter, or otherwise interact with us. The data we may gather includes:

• Contact details: Your email address and any name information you provide when subscribing to our newsletter via Mailchimp.
• Technical information: IP address, browser type, device identifiers, and similar data collected through cookies and comparable technologies.
• Site usage: Information about how you navigate our website, which pages you visit, and how long you stay on each page.

2. How we use your personal data

• Send newsletters and relevant marketing information via Mailchimp, with your consent.
• Analyse site usage to improve user experience and site functionality (legitimate interest).
• Manage our affiliate operations and track transactions to deliver relevant recommendations and offers (legitimate interest).
• Comply with legal obligations and protect the rights of Top-Tested.com.

3. Newsletters and Mailchimp

When you subscribe to our newsletter, you consent to us using your email address for that purpose. We use Mailchimp as a third-party provider to manage and send mailings. Mailchimp processes your email address in accordance with its own privacy policy. You can unsubscribe at any time via the link included in every newsletter.

4. Cookies and similar technologies

We use cookies and comparable tracking technologies to enhance your experience, analyse traffic, and personalise content and ads. For details, please see our separate cookie policy.

5. Legal bases for processing

Depending on the context, we process your personal data on one or more of the following legal bases:

• Consent (Article 6 (1)(a) EU GDPR / UK GDPR) – e.g. when you sign up for our newsletter.
• Legitimate interests (Article 6 (1)(f)) – e.g. to analyse site usage, prevent fraud, or improve our services.
• Legal obligation (Article 6 (1)(c)) – where we must retain certain records or respond to lawful requests.

6. Your rights

Under the EU GDPR and UK GDPR you have, among others, the rights to:

• Access – obtain a copy of the data we hold about you.
• Rectification – correct inaccurate or incomplete data.
• Erasure – have your data deleted in certain circumstances.
• Restriction – limit processing under specific conditions.
• Objection – object to processing for direct marketing or other legitimate interests.
• Data portability – receive your data in a structured, commonly used format.
• Withdraw consent – at any time where processing is based on consent.

Complaints: If you are based in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO). If you are in the EU, you may contact your local data-protection authority.

7. How we protect your data

We employ appropriate technical and organisational measures to safeguard your personal data against unauthorised access, alteration, disclosure, or destruction. Only authorised staff and service providers bound by confidentiality obligations have access to your data.

8. Sharing personal data

We do not sell your personal data. We share it only with trusted third parties that help us operate our business, including:

• Mailchimp: For sending newsletters.
• Google Analytics: For analysing website traffic and user behaviour.
• Affiliate partners: To track transactions when you use our recommendations and links.

All such partners are contractually required to protect your data and process it only for the agreed purpose.

9. International data transfers

Some of our service providers (e.g. Mailchimp) are located outside the European Economic Area (EEA) and the UK. When we transfer personal data internationally, we rely on legally recognised safeguards such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), or other approved mechanisms, to ensure your data remains protected.

10. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law. You may request deletion of your data at any time, provided we are not legally obliged to keep it.

11. Changes to this policy

We may update this privacy policy to reflect changes in our practices or legal requirements. The most recent version is always available on this page. Please review it periodically to stay informed.

12. Contact

If you have questions about this privacy policy or our data practices, please use the contact form on our website.