Privacy policy.

This policy explains how boilingwatertap.com handles personal data of UK and EU readers, written to satisfy the UK GDPR (the Data Protection Act 2018, as amended post-Brexit), the EU GDPR where relevant, and the UK Privacy and Electronic Communications Regulations.

Data controller

The data controller for boilingwatertap.com is Next Day Online B.V., registered at Wilpsedijk 2b, 7384 CC Wilp, Netherlands, Chamber of Commerce (KvK) number 08198136. We serve UK readers and process personal data under UK GDPR for those readers, and under EU GDPR for visitors based in the European Economic Area.

Contact for any privacy enquiry, data subject request or complaint: info@nextdayonline.nl. We respond within one calendar month, which is the UK GDPR statutory deadline.

What we collect and why

We try to collect the minimum personal data we need to run a comparison platform. In practice that means:

Analytics data. Aggregated, IP-anonymised page views, referrers, device type and approximate region, collected via Google Analytics 4. Lawful basis: consent under Article 6(1)(a) UK GDPR. Analytics cookies fire only after you explicitly accept them in the cookie banner. No cross-site advertising tracking is enabled by default.
Email correspondence. If you email us, we process your address and message contents to answer you. Lawful basis: legitimate interest in responding to enquiries.
Server logs. IP address, user agent, request path, status code, retained briefly for security and abuse prevention. Lawful basis: legitimate interest in platform security.

Advertising cookies (Google Ads conversion tracking) are off by default and fire only if you grant marketing consent. See our cookie policy for category-level detail and how to manage your consent.

Processors we use

The following processors handle personal data on our behalf under a written data processing agreement:

Vercel Inc. Hosting and edge delivery of the website. May process server log data in line with their published privacy policy.
Supabase Inc. Database and backend processing for content storage and operational data.
Google Analytics 4 (deployed via Google Tag Manager). Provided by Google Ireland Ltd (Dublin) for EEA visitors and Google LLC for UK visitors. We collect aggregated, IP-anonymised visitor behaviour to understand which content is useful, measure search performance and debug technical issues. Deployed via Google Consent Mode v2: analytics storage and advertising storage default to denied, and cookies (`_ga`, `_ga_*`) only fire after you grant explicit consent in our cookie banner. Lawful basis: consent under Article 6(1)(a) UK GDPR. Retention: 14 months (GA4 default). You can withdraw consent at any time via the "Manage cookies" link in the footer. See policies.google.com/privacy.
Google Ads conversion tracking (optional). If we later run paid campaigns, conversion cookies fire only for visitors who grant marketing consent. They are off by default. Same vendor and lawful basis as above. You can withdraw consent at any time via the "Manage cookies" link in the footer.

Some of these processors are based outside the UK and EEA. Where international transfers occur, they take place under UK International Data Transfer Agreements, EU Standard Contractual Clauses, or equivalent safeguards.

Your rights

Under UK GDPR you can exercise the following rights at any time, free of charge. EU readers have equivalent rights under EU GDPR.

Right of access. Ask for a copy of the personal data we hold about you.
Right to rectification. Ask us to correct inaccurate or incomplete data.
Right to erasure. Ask us to delete data we no longer have a lawful basis to hold.
Right to data portability. Receive your data in a structured, machine-readable format.
Right to object. Object to processing based on legitimate interest, including profiling.
Right to withdraw consent. Where we rely on consent (for example for non-essential cookies), you can withdraw it at any time.

Send any of these requests to info@nextdayonline.nl. You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk or with your local EEA supervisory authority.

Retention

We retain analytics data for as short a period as is useful for trend analysis, email correspondence for as long as needed to handle the matter plus a short archival period, and server logs for a short rolling window for security purposes. We do not retain personal data longer than we need it.

Policy last updated on launch of boilingwatertap.com.