Privacy notice
TechSussd is built to need very little about you. You can use it without an account, and the questions never ask about your health. This page says exactly what we hold, and it is written from the same record our own checks are run against.
Who we are
ArcGabriel Ltd (company number 17389329) runs TechSussd and decides how your personal data is used, which makes it the controller. Its registered office is Carlile Institute Business Centre, 54 Huddersfield Road, Meltham, Holmfirth HD9 4AE. ArcGabriel Ltd is registered with the Information Commissioner's Office.
Write to us about anything on this page at hello@techsussd.com.
The short version
- There are no accounts for visitors. Operators who run the site sign in; nobody else does.
- The questions are about what you want a watch for, never about your health.
- Your answers are not linked to who you are. If you ask us to email your verdict, your address is linked to it for 30 days from sending, then deleted.
- We use no advertising or analytics cookies and load no third-party scripts.
- We do not sell personal data, and we do not use it to train AI models.
What we hold, why, and for how long
TechSussd is not open yet. Rows marked Not yet describe features that collect nothing until they open. They are listed now so the rules are public before any data exists.
| What we hold | Why | Lawful basis | How long |
|---|---|---|---|
| Your email address, if you ask us to email you your verdict card | To send the card you asked for, once | Contract, Art. 6(1)(b) | 30 days from sending |
| Your email address and the watch, if you sign up for a price alert | To email you when the price changes, which you asked for and can stop with one click | Consent, Art. 6(1)(a); PECR reg. 22 | Until you unsubscribe or the alert ends (12 months at most), then 30 days; unconfirmed sign-ups 7 days |
| What you tell us when you report a mistake, and your email address if you choose to give it Not yet | To check and correct the register, and to reply if you asked us to | Legitimate interests, Art. 6(1)(f) | 12 months from resolution (or from receipt, if never resolved) |
| Your email address and message, if you email us Not yet | To read and answer it, and to correct the register if it tells us something | Legitimate interests, Art. 6(1)(f) | 12 months from receipt |
| Operators only: the email address an operator signs in with | To let the people who run TechSussd sign in to its console securely | Legitimate interests, Art. 6(1)(f) | While the person is an operator; deleted when they stop |
| Operators only: an encrypted second-factor secret | To secure the console sign-in | Legitimate interests, Art. 6(1)(f) | With its operator account |
| Operators only: the address a sign-in link was requested for | To stop sign-in links being requested too often | Legitimate interests, Art. 6(1)(f) | 1 hour |
| Operators only: which operator approved a change to the register | To keep a record of who approved each published fact | Legitimate interests, Art. 6(1)(f) | With the fact it approved (fact history is kept indefinitely) |
| If you publish device reviews: your name as it appears on a page we cite Not yet | To credit the source of a fact, as the citation rules require | Legitimate interests, Art. 6(1)(f) | With the facts that cite it (indefinitely, as the citation) |
| Your answers to the questions and the verdict we worked out | To show you your verdict and let you share it. We do not know who you are from your answers | Not personal data: no basis needed | With its register snapshot (24 months at most) |
Where we rely on legitimate interests, we have weighed them against yours: you chose to write to us, you would expect us to read and answer, we keep only what is needed to do that, and health details are removed before anything is stored. You can object at any time and we will stop unless we have a compelling reason, which for a report or an email is unlikely.
Where we rely on consent (price alerts), you can withdraw it with one click from any alert email, and we stop at once.
Health information
We do not hold health information about you. No question asks about a health condition and no field stores one.
When the "ask about your verdict" box opens, a question that mentions a condition, a symptom, a medicine or pregnancy will get a fixed reply pointing you to a GP or pharmacist. That question is not stored and is not sent to the AI model. Reports and emails have health terms removed before they are stored.
Where it is stored
- Railway, EU West region (the application and its database)
- Cloudflare R2, EU jurisdiction (encrypted off-site backups)
Both are in the European Economic Area, which UK law treats as adequate for personal data. If either moves, this notice changes at the same time.
Who else handles it
These companies process data for us, only on our instructions:
- Railway hosts the site and its database. Where: EU West region.
- Cloudflare DNS, encrypted backups (R2, EU jurisdiction), and receiving mail sent to our address. Where: EU jurisdiction for backups; mail routing as Cloudflare operates it.
- Resend sends the emails you ask for (verdict cards, price alerts). Where: to be confirmed before launch.
- An AI model provider turns public source text into structured facts for a person to approve, and will write the plain-English summary of a verdict from its cited rows. Where: United States (transfer terms to be confirmed before launch).
Affiliate networks and retailers receive nothing from us about you. When you click a link labelled "Ad", you go to their site and their privacy notice applies there.
The AI model
We use an AI model for two jobs, and only on text that is not about you:
- Turning public source text (study abstracts, makers' pages, software release notes) into structured facts, which a person checks before anything is published.
- When verdict summaries open: writing a plain-English summary from the register rows a verdict cites, and answering a question about your verdict after it has been screened for health terms.
Your email address, your reports and your messages are not sent to it. If a message you send us states a fact we want to check, an operator may send the fact's text to the model with your address removed and health terms redacted.
The provider is in the United States. Before TechSussd opens we will confirm, and state here, how long the provider keeps what it is sent and the safeguard that covers the transfer. Switching the model off is one setting; the site then uses fixed templates.
Cookies
We use only cookies the site needs to work. There are no advertising or analytics cookies and no third-party scripts. We count visits in our own database as event names and counts, with no cookie and no identifier.
After you click a link labelled "Ad", the retailer's affiliate network may set its own cookie on its own site, so the retailer can tell it a sale came from us. That cookie is theirs, under their notice.
Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict it, or to send it to you in a portable form, and you can object to our use of it. Email hello@techsussd.com. We answer within 1 month.
Deleting means deleting: the rows go from the database at once, not hidden and not marked. What remains is a dated line in our audit log saying that a deletion happened, with counts and nothing that identifies you. Backups roll off on their own schedule.
If you are unhappy with how we have handled your data, tell us first at the same address and we will acknowledge your complaint within 30 days. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
Decisions made by software
The three watches in a verdict are chosen by fixed rules from your answers and the register. The verdict is not about you as a person and has no legal or similar effect on you, so it is not the kind of automated decision UK GDPR Article 22 restricts.
Changes to this notice
This notice and our internal data record are kept in step: neither changes without the other. Each version is dated at the top of this page.