Legal
Privacy policy
How Diligo may collect, use, share and protect personal data when you use the comparison service.
Controller
Who is responsible for your data.
The data controller is ORIGO BYTE LTD, trading as Diligo. Company number: 16948065.
Privacy contact: [email protected].
Data collected
The data we may collect.
- Identity and contact data, such as name and email address where you provide them.
- Account and authentication data, if accounts exist.
- Search, browsing, click, usage and device data.
- Cookie preference and consent records.
- Contact form messages and support routing details.
- Affiliate outbound click data needed for commission attribution.
- Security, fraud prevention, bot detection and abuse prevention logs.
- Saved products, alerts, collections or preferences, if those features exist.
Lawful bases
Why we use personal data.
| Purpose | Data used | Lawful basis | Notes |
|---|---|---|---|
| Provide the service | Search, browsing, account and preference data | Contract or legitimate interests | Depends on whether account features exist. |
| Respond to enquiries | Contact details and message content | Legitimate interests or contract | Keep enough detail to handle the request. |
| Security and abuse prevention | Technical logs, IP address, device and security signals | Legitimate interests | Needed to protect Diligo and users. |
| Analytics and improvement | Usage and analytics data | Consent where PECR consent is required | Optional analytics should run only after consent. |
| Affiliate attribution | Outbound click and retailer route data | Legitimate interests or consent where required | Used to attribute commission to Diligo. |
| Legal compliance | Records needed for legal, tax, accounting or regulatory duties | Legal obligation | Retained for the period required by applicable law. |
| Cookie consent management | Consent choice and timestamp | Legal obligation or legitimate interests | Needed to remember and evidence choices. |
Transfers and retention
International transfers and retention need final schedules.
Some providers may process data outside the UK. Where required, Diligo uses appropriate safeguards and transfer mechanisms under applicable law.
We keep personal data only for as long as needed for the purposes described in this policy.
Your rights
You have data protection rights.
Depending on the circumstances, you may have the right to access, correct, delete, restrict or object to processing, port your data and withdraw consent where processing is based on consent.
You can contact [email protected]. You also have the right to complain to the UK Information Commissioner's Office through ico.org.uk.
Other information
Children, changes and contact.
Diligo is not directed at children.
We may update this policy when services, providers or legal obligations change. Questions can be sent to [email protected].