Privacy Policy

1. About this policy

This Privacy Policy explains how DriveSize collects and uses personal information when you visit drivesize.com or contact us.

DriveSize is the controller of the personal information described in this policy. You can contact us about privacy matters at drivesize@drivesize.com.

2. Personal information we collect

• Contact information — your email address, name and anything else you include if you email us
• Technical information — IP address, request time, pages requested, referring page, browser, device, operating system, response status and security or diagnostic logs
• Cookie and preference information — cookie-consent choices, consent records, measurement-unit preference and whether your browser has turned off cookie-free analytics
• Usage information — pages visited, interactions, referrer, approximate location and browser or device information collected through the analytics services described below

We obtain this information from you, your browser or device, and the service providers that help us operate the website. You do not have to provide personal information to browse DriveSize. If you email us and want a reply, we need an address at which we can contact you.

3. How and why we use personal information

• Provide, secure and troubleshoot DriveSize — our legitimate interests in operating a reliable and secure website
• Reply to messages and investigate corrections — our legitimate interests in communicating with visitors and improving our content
• Remember settings you request — our legitimate interests in providing the functionality you choose
• Display the cookie panel and record your choices — our legal obligations and legitimate interests in demonstrating compliance
• Produce aggregate cookie-free statistics — our legitimate interests in understanding and improving DriveSize
• Operate optional Google Analytics after you accept statistics cookies — your consent
• Comply with law and establish, exercise or defend legal claims — our legal obligations and legitimate interests, as applicable

When we rely on legitimate interests, we consider the impact on your rights and use personal information only where those interests are not overridden by your interests, rights or freedoms.

4. Cookies and analytics

DriveSize uses cookies and similar technologies for preferences, consent management and Site analytics. Some of these activities may involve the technical and usage information described above. Our Cookie Policy explains the technologies, providers, durations and controls, including how to manage optional cookies and turn off cookie-free analytics.

5. Who we share information with

• Vercel, which provides website hosting and cookie-free Web Analytics
• Usercentrics, which provides the Cookiebot consent-management service
• Google, which provides Google Tag Manager and, after statistics consent, Google Analytics
• Email and other technical-service providers where needed to operate DriveSize or receive correspondence
• Professional advisers, regulators, courts or law-enforcement bodies where disclosure is required by law or reasonably necessary for legal claims

Service providers may process information on our instructions or as independent controllers for activities described in their own privacy notices. We do not sell personal information or use it for targeted advertising.

6. International transfers

Some service providers process information in the European Economic Area, the United States or other countries outside the UK. Where a restricted transfer takes place, we use an applicable safeguard such as UK adequacy regulations or approved contractual protections, including the UK International Data Transfer Agreement or UK Addendum to the European Commission's Standard Contractual Clauses.

You can contact us for more information about the safeguard used for a particular transfer.

7. How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected. When deciding how long to keep it, we consider its nature, the reason it is used, provider settings, security requirements, legal obligations and whether it may be needed for a complaint or legal claim.

• Correspondence is kept until the enquiry or correction is resolved and for as long as reasonably needed afterwards
• Technical and security logs are kept for the operational periods used by our providers, or longer where needed to investigate an incident
• Consent, preference and analytics information is kept according to the relevant provider or account settings and the durations described in our Cookie Policy
• Records relating to rights requests, complaints or legal matters may be kept for longer where necessary to demonstrate compliance or handle a claim

We delete or anonymise information when it is no longer required. Information that has been aggregated or anonymised so it no longer identifies anyone may be kept for longer.

8. Security

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, alteration, loss or disclosure. No internet service is completely secure, so we cannot guarantee absolute security.

9. Your data-protection rights

Depending on the circumstances and lawful basis, you may have the right to:

• Ask for access to and a copy of your personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to erase information
• Ask us to restrict how information is used
• Object to processing based on legitimate interests
• Receive information you provided in a structured, commonly used and machine-readable format where data portability applies
• Withdraw consent at any time where processing relies on consent, without affecting processing that took place before withdrawal

These rights are not absolute and exemptions may apply. To exercise a right, email us using the contact details below. We may ask for information reasonably needed to understand the request and confirm your identity.

10. Your right to object

You have a right to object to processing based on our legitimate interests because of your particular situation. If you object, we will stop the processing unless we have compelling legitimate grounds to continue or the processing is needed for legal claims.

You do not need to give a reason to turn off cookie-free Site analytics. Use the cookie-free analytics control to turn it off free of charge. For optional analytics, withdraw statistics consent through “Cookie preferences” in the footer.

11. Children

DriveSize is a general-interest website and is not designed to collect personal information from children. It does not provide public user accounts or ask visitors to provide a date of birth.

If you are a parent or guardian and believe a child has sent us personal information, contact us so we can review and, where appropriate, delete it.

12. Changes to this policy

We may update this policy when our practices, service providers or legal obligations change. We will publish the revised policy on this page and update the effective date above.

13. Contact and complaints

For privacy questions, rights requests or complaints, email drivesize@drivesize.com.

You have the right to complain to the Information Commissioner's Office (ICO).