Privacy Policy

Effective Date: 13 May 2025
Last Updated: 16 July 2025

Version 1.2

1. Introduction

SaveandSwitch.co.uk (“SaveandSwitch”, “we”, “us” or “our”) is a broadband lead generation and switching service that operates entirely within the United Kingdom, providing consumers with impartial comparison services via UK-based call centres. This Privacy Policy explains in detail how we collect, use, store, share and protect your personal data, including the legal bases we rely on under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our aim is to ensure transparency, legal compliance, and respect for your data rights at all times. This Policy applies to all data collected through our website, callback service, phone conversations, tracking technologies, and third-party integrations. By using our website or services, submitting your personal details via a webform, or engaging in a callback conversation, you confirm that you understand and accept the terms of this Policy. The controller responsible for your data is SaveandSwitch.co.uk, and you may contact us at any time regarding questions or data rights using the contact details provided in the final section of this document. This Privacy Policy is kept under regular review and may be updated in line with operational, legal or regulatory changes; we encourage users to revisit it periodically.

2. ​Personal Data We Collect

We collect personal data that you provide directly, such as your name, phone number, email address, postcode, and broadband requirements, when you complete our webform or speak to a member of our team during a callback; in addition, we automatically collect device data (including IP address, browser type, device identifier, and referral source), browsing behaviour on our website, and cookie-based analytics through Google Analytics, Meta Pixel, and Phonexa’s tracking technologies, with appropriate consent; call recordings may also be captured for training and compliance purposes, and we may enrich your record with additional information gathered from broadband availability APIs or trusted lead generation partners from whom you originally registered your interest, ensuring all such third-party data sources have obtained prior consent before sharing your data with us.

3. How We Use Your Personal Data

We use your personal data to deliver our core service of broadband comparison and switching by phone, which includes calling you back to discuss your requirements, analysing available broadband deals for your postcode, and providing you with personalised options; this data may also be used to support customer service requests, verify identity, assist in quality assurance (including call recording review), improve our site via analytics, run targeted advertising campaigns (with consent), maintain business operations, detect fraud, comply with legal obligations, and—only where explicitly permitted by you during a call or form submission—provide information about related services such as TV or energy switching from SaveandSwitch or a trusted partner; under no circumstances do we sell your data or use it for any automated decision-making without human involvement.

4. Lawful Bases for Data Processing

We process your personal data where we have a lawful basis to do so: most commonly this will be to fulfil a contract or take steps at your request before entering one (for instance, providing broadband deal comparisons or initiating a switch), but we also rely on legitimate interests (such as analytics, fraud prevention, and customer support), consent (for marketing communications, cookies, and call tracking), and compliance with legal obligations (such as record-keeping or responding to regulatory inquiries); where processing is based on legitimate interests, we ensure that our interests do not override your rights and freedoms, and where consent is relied upon, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

5. Cookies and Tracking Technologies

We use cookies and other tracking technologies to improve website functionality, enable essential features, analyse usage via Google Analytics, deliver targeted advertisements through platforms such as Meta (Facebook/Instagram), and personalise your experience; cookies may collect pseudonymised identifiers, user behaviour, and technical metadata such as device type and browser settings, and are grouped into essential (required for core functions), analytics (to help us understand user behaviour), advertising (to enable remarketing and conversion tracking), and preference categories (to remember settings); we obtain explicit consent for non-essential cookies when you first visit our site, and you may update your cookie preferences at any time through our cookie banner, browser settings, or opt-out tools provided by analytics and advertising partners.

6. Data Sharing and Disclosure

We do not sell your personal data. However, we may share it with trusted third parties where necessary for the delivery of our services. This includes broadband providers if you choose to switch through us, as well as platforms such as Phonexa, which handles call routing and lead tracking. We also work with cloud-based analytics and marketing platforms including Google and Meta, as well as email delivery systems, customer support tools, and secure cloud hosting services.

We may also share your data with our professional advisors, contractors, or development partners, but only where required for the functioning and improvement of our services. In certain situations, we may be required to disclose data to regulators, supervisory authorities such as the ICO, or law enforcement if legally compelled to do so by valid warrant. Additionally, in the event of a business transfer, merger, or acquisition, relevant data may be disclosed to successor entities.

As of 11th July 2025, our broadband provider partners include Earth Broadband, Sky, Vodafone, Fusion Fibre, Currys, Cuckoo, Zoom Fibre and BeFibre. These providers only receive the minimum data necessary to process your request or complete your switch and are contractually obligated to handle that data securely, lawfully, and solely under our instructions.

In all cases, we ensure that appropriate contracts and data protection safeguards are in place to prevent misuse and to maintain compliance with all applicable legal requirements.

7. International Data Transfers

While we aim to process and store your personal data within the UK or EEA wherever possible, certain service providers we rely on may process data in countries outside the UK (such as the United States), including Google Analytics and Meta for advertising and analytics; in such cases, we ensure that appropriate safeguards are implemented in accordance with UK GDPR, such as using Standard Contractual Clauses, the UK International Data Transfer Addendum, and additional technical measures like encryption, and we routinely monitor the legal status of international data transfer mechanisms to remain compliant with ICO and European Data Protection Board guidance.

8. Data Retention

We retain your personal data for no longer than necessary for the purposes it was collected: contact form submissions and enquiry data are typically retained for up to three years, completed customer switch records for six years (in line with accounting and legal limitations), call recordings for 12 to 24 months (unless needed for ongoing disputes), and marketing contact records only for as long as you remain subscribed, after which we retain minimal suppression data to respect your opt-out preferences; analytics and cookie data are retained according to cookie lifespan (usually 26 months or less), and all data retention is periodically reviewed, with expired records being securely deleted or anonymised in line with best practices.

9. Data Security

We implement a range of technical and organisational safeguards to protect your personal data, including HTTPS encryption, secure storage systems, pseudonymisation of records, user access controls, secure passwords, staff confidentiality agreements, employee training on data protection, routine audits of our cloud infrastructure, and regular reviews of third-party processor security measures, ensuring that your data is kept safe from accidental loss, unauthorised access, or misuse, while maintaining resilience against data breaches and employing appropriate incident response protocols if such events occur.

10. Your Rights as a Data Subject

You have the legal right to request access to your personal data, correct inaccuracies, request erasure (in certain situations), restrict or object to processing (especially for marketing or where our processing is based on legitimate interests), and request data portability of your provided information; you may also withdraw consent at any time, lodge a complaint with the Information Commissioner’s Office (ICO), and request information about any international transfers or third-party data sharing relevant to your record; we provide clear contact methods for all requests and do not charge a fee unless a request is clearly excessive, in which case we will explain our reasoning transparently.

11. Changes to this Privacy Policy

This Privacy Policy is reviewed regularly and may be updated to reflect changes in law, services, third-party processors, or internal procedures; when we make material changes, we will notify you where appropriate (for instance, via the website or email), and any updated version will include a new “last revised” date at the top of this document; we encourage you to review the Privacy Policy periodically to stay informed about how your data is used, and we retain older versions on request for reference.

12. Contact Us

If you have questions about this Privacy Policy or how your data is processed, or if you would like to exercise your rights, please contact us by email at privacy@saveandswitch.co.uk or write to Privacy Team, SaveandSwitch.co.uk, [Insert Postal Address], United Kingdom; we aim to respond to all privacy-related requests within one calendar month and will verify your identity before disclosing any personal information in order to protect your privacy and comply with legal obligations.