Privacy notice

1. Information we use

• Account details: your email address, account identifier, registration and sign-in information, and whether your email is confirmed. Supabase handles password authentication; passwords are not stored in your ISA records.
• Saved ISA information: provider and account names, balances, interest rates, access types, dates and any notes you enter, together with balance history and account activity.
• Reminders: the dates, email preferences and notice periods you select, plus records of sending attempts and email-service responses.
• Support messages: your email address and the information you send when you contact us.
• Technical information: our hosting, account and email providers may record IP addresses, browser information, request details and security or delivery logs to operate their services.
• Optional usage analytics: if Google Analytics is configured and you accept analytics, it receives public page visits, comparison usage, clicks to ISA providers and clicks to create an account. Google also processes technical information such as browser/device information and cookie identifiers to produce usage reports.

Public comparison inputs, such as your deposit amount and access preferences, are used to calculate results in your browser. They appear in the results-page address and may therefore be included in hosting request logs. They are not automatically added to your saved ISAs.

Saved ISA records are entered by you. The service does not connect to your bank account or ask for bank login details.

2. Why we use it

Our lawful bases under UK data protection law are:

• Providing your account and tracking features — contract: we use the information needed to provide the service you request, including account verification and password recovery.
• Optional reminder emails — consent: reminders are off by default. You choose whether to enable them and can turn them off from your dashboard at any time. Withdrawing consent does not affect earlier lawful processing.
• Optional usage analytics — consent: we use analytics to understand how the public comparison site is used and improve it. The Google tag stays off until you accept analytics. You can reject it or withdraw your choice using Cookie settings in the footer.
• Support and security — legitimate interests: we use information necessary to answer enquiries, resolve faults and protect the service and its users against misuse.
• Legal duties — legal obligation: we use information where necessary to comply with applicable law, including handling data-protection requests.

We do not sell your personal ISA records or use them for advertising. The current service does not send marketing emails. Its calculations rank listed products; they do not decide whether a provider will accept your application.

3. Who receives information

Your saved ISA records are not displayed in public comparisons. The operator and authorised service providers may access information where needed to run, support and protect the service.

• Supabase: account authentication and storage of account, ISA, history and reminder records.
• Email delivery providers, including Resend: your recipient address and the email content needed to deliver account or reminder emails. Reminder emails include the provider/account label and entered date, not your balance or notes.
• OpenAI Sites and Cloudflare: website hosting, access and delivery, which may involve technical request information.
• Our support mailbox provider: storage and delivery of emails you send to support.
• Google Analytics: optional usage analytics when you accept. We do not send your email, user identifier, saved ISA balances or notes. Page addresses are limited to known public paths, with query strings and fragments removed; account, authentication and administration pages are excluded. Provider-click events contain the public product identifier, provider name and destination domain, rather than full affiliate URLs.

We may disclose information if required by law. Provider and affiliate websites have their own privacy notices when you follow their links.

Read Google’s privacy policy and how Google uses information from sites that use its services for more information about its processing.

4. Storage and international processing

Account and saved ISA records are stored with Supabase. Some service providers process information outside the UK, including in the United States. Their data-processing terms describe safeguards for international transfers, such as approved contractual clauses and the UK addendum, or applicable adequacy arrangements.

You can read Supabase’s data-processing terms and Resend’s data-processing terms, or email us for information about the safeguards relevant to your data.

5. How long we keep information

We keep your account details, saved ISA records, history and reminder records while your account exists, until account deletion. Accounts are not automatically removed because they are inactive.

Removing an ISA deletes that saved holding and its reminder settings and delivery records. Earlier balance history and activity can remain in your account so your dashboard retains its history.

To request deletion of your account and its associated records, email support@cashisafinder.co.uk. After verifying the request, we remove the account and its associated records from the live account database. Deleting your Cash ISA Finder account does not close an ISA with its provider.

Support messages are kept only as long as needed to handle the enquiry and any related complaint or legal requirement. Technical logs, email-provider copies and any backups follow the relevant provider’s retention schedule; deleting live records does not immediately erase those copies. We may retain a limited record of a privacy request where needed to demonstrate how it was handled.

We remember your analytics choice in this browser for 180 days. Our analytics cookies are set to expire after up to 180 days. Google’s Analytics property settings govern retention of usage data; aggregated historical reports may be kept longer. Withdrawing analytics stops future collection and removes our analytics cookies in this browser; it does not remove previously collected statistics.

6. Browser storage

Essential browser storage keeps you signed in and completes account verification. Hosting and access services may also use essential cookies. You can log out or clear site storage, although clearing it can interrupt sign-in and verification.

Clearing browser storage does not delete saved ISA records held with your account. We also store your privacy choice so we can honour it on future visits.

When Google Analytics is configured, you can choose Accept analytics or Reject analytics. Analytics stays off before you choose and when you reject it. Accepting allows our Google Analytics cookies, prefixed cif_ga, to distinguish visits and measure usage of public pages. Our implementation does not enable advertising personalisation or Google Signals.

Use Cookie settings in the footer at any time to change your choice. Rejecting analytics does not prevent you from comparing accounts, creating an account, saving ISAs or receiving the reminders you choose.

7. Your rights and choices

Depending on the circumstances, you can ask to access or receive a copy of your personal data, correct it, delete it, restrict its use, object to processing based on legitimate interests, or receive data in a portable format. You can withdraw consent for optional reminders in your dashboard.

Email support@cashisafinder.co.uk to make a request. Where possible, contact us from the email address registered to your account. We may need to verify your identity, and will explain any lawful limit on what we can provide. We normally respond within one month, subject to any verification, clarification or extension permitted by law.

You can also complain to the Information Commissioner’s Office (ICO).

8. Changes to this notice

We will update this page if our data handling changes and revise the date above. Where a change materially affects your information, we will bring it to your attention before new processing starts.