Privacy Policy

Last updated: 24 June 2026

1. Introduction

TidyHacks ("we", "us", "our") is operated by Corporate Home Away South Limited, a company registered in England and Wales (company number 11707259), with its registered office at 19 Fittleworth Close, Worthing, BN12 6NB.

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you visit our website at tidyhacks.co (the "Website") and any associated services, pages, features, or content we offer (collectively, the "Services").

By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use the Website.

This policy should be read alongside our Legal Information page, which contains additional disclosures including our Amazon Associates disclosure.

2. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018, the data controller is:

Corporate Home Away South Limited
Trading as TidyHacks
Email: [email protected]

3. Information We Collect

3.1 Information You Provide Directly

• Email address. If you voluntarily subscribe to our newsletter or email updates via the subscription form on our Website, we collect the email address you provide. We do not require any other personal information to subscribe.
• Correspondence. If you contact us via email at [email protected], we will retain the content of your message, your email address, and any additional information you choose to provide, for the purpose of responding to your enquiry.

3.2 Information Collected Automatically

When you visit the Website, certain information is collected automatically through our analytics provider. This includes:

• Pages visited and interactions with page elements (clicks, scrolls)
• Referring URL (how you arrived at the Website)
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Approximate geographic location (country/region level, derived from IP address)
• Screen resolution
• Date and time of visit
• Session duration
• UTM campaign parameters (e.g. utm_source, utm_medium) if present in the URL

This data is collected in an anonymised or pseudonymised form and is used solely for the purpose of understanding how visitors use our Website so we can improve it. We do not use this data to personally identify individual visitors.

3.3 Information We Do Not Collect

We do not collect, process, or store:

• Names, postal addresses, or telephone numbers (unless voluntarily provided via email)
• Payment or financial information (all transactions occur on third-party sites such as Amazon)
• Government-issued identification numbers
• Sensitive personal data (racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, biometric data, or criminal records)
• Information about children (see Section 11)

4. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Legal Basis (UK/EU GDPR)
To send email newsletters and product recommendations to subscribers	Consent (you opted in via the subscription form)
To analyse website usage and improve our content and user experience	Legitimate interest (understanding how visitors use the site)
To respond to enquiries you send us via email	Legitimate interest (responding to correspondence)
To comply with legal obligations	Legal obligation
To detect and prevent fraud or abuse of the Website	Legitimate interest (security)

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide reporting information to website operators.

5.2 Cookies We Use

Cookie / Technology	Provider	Purpose	Duration
PostHog analytics cookies	PostHog (EU cloud)	Anonymous usage analytics — page views, clicks, session tracking	Up to 12 months
sessionStorage (utm_*)	First-party	Preserves UTM campaign parameters within a single browsing session for attribution	Session only (cleared when browser tab closes)

We do not use any advertising cookies, retargeting pixels, social media tracking pixels, or third-party marketing cookies.

5.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, to accept only first-party cookies, or to delete cookies when you close the browser. Please note that disabling cookies may affect the functionality of the Website.

For more information about cookies and how to manage them, visit allaboutcookies.org.

6. Third-Party Services

We use the following third-party services in connection with the Website. When you interact with these services, their own privacy policies and terms apply:

6.1 PostHog (Analytics)

We use PostHog for website analytics. PostHog processes data on servers within the European Union. Analytics data is anonymised and cannot be used to personally identify you. See PostHog's privacy policy.

6.2 Amazon

TidyHacks is a participant in the Amazon Associates Programme. Product links on this Website direct you to Amazon's websites (including amazon.com, amazon.co.uk, and localised Amazon stores via our geo-routing provider). When you click an affiliate link and visit Amazon, Amazon's own privacy policy and cookie practices apply. We do not receive any personally identifiable information about you from Amazon. We receive only aggregated, anonymised commission and click data.

6.3 Genius Link (Geo-Routing)

We use Genius Link (geni.us) to route affiliate links to the appropriate Amazon store based on your geographic location. When you click a product link, Genius Link may process your IP address to determine your country. See Genius Link's privacy policy.

6.4 YouTube

Some pages on the Website embed YouTube videos. When a YouTube video loads, Google/YouTube may set cookies and collect data according to Google's privacy policy. We use privacy-enhanced mode where available to minimise data collection until you interact with the video.

6.5 Netlify

The Website is hosted on Netlify. Netlify may process server access logs (including IP addresses) as part of providing hosting services. See Netlify's privacy policy.

6.6 Pinterest

We use the Pinterest API to publish our own content (pins featuring our product reviews) to our own Pinterest business account. We do not access, collect, or process any Pinterest user data through this integration.

7. Data Sharing and Disclosure

We do not sell, rent, trade, or otherwise share your personal information with third parties for their own marketing purposes. We may share information in the following limited circumstances:

• Service providers. We may share data with trusted third-party service providers who assist us in operating the Website (e.g. hosting, analytics, email delivery), subject to contractual obligations to keep the data secure and use it only for the purposes we specify.
• Legal requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers. In the event of a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will notify you via a prominent notice on the Website of any change in ownership or use of your personal information.
• Aggregated or anonymised data. We may share aggregated or anonymised information that cannot reasonably be used to identify you.

8. International Data Transfers

Our analytics data is processed by PostHog on servers within the European Union. Some third-party services we use (such as Amazon and YouTube) may process data outside the UK and EU. Where data is transferred outside the UK or EU, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office, or transfers to countries with an adequacy decision.

9. Data Retention

Data Type	Retention Period
Analytics data (PostHog)	Up to 12 months from collection
Email subscriber addresses	Until you unsubscribe, at which point your email address is deleted within 30 days
Email correspondence	Up to 24 months from last contact, unless a longer retention is required for legal purposes
Server access logs (Netlify)	Subject to Netlify's retention policy (typically 30 days)

10. Your Rights

Under the UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

• Right of access. You have the right to request a copy of the personal data we hold about you.
• Right to rectification. You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"). You have the right to request that we delete your personal data, subject to certain exceptions.
• Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object. You have the right to object to the processing of your personal data where we rely on legitimate interest as the legal basis.
• Right to withdraw consent. Where we process your data based on consent (e.g. email newsletter), you have the right to withdraw your consent at any time. This does not affect the lawfulness of processing carried out before you withdrew consent.
• Right to lodge a complaint. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one calendar month.

11. Children's Privacy

The Website is not directed at children under the age of 16. We do not knowingly collect or solicit personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe that a child under 16 has provided us with personal information, please contact us at [email protected].

12. Security

We take reasonable technical and organisational measures to protect the information we collect against unauthorised access, alteration, disclosure, or destruction. These measures include the use of HTTPS encryption across the entire Website, secure hosting with Netlify, and access controls for internal systems. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

13. Links to Other Websites

The Website may contain links to third-party websites, including Amazon product pages, YouTube, and social media platforms. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policy of each website you visit.

14. Do Not Track

Some web browsers transmit "Do Not Track" (DNT) signals. As there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to them. However, our analytics setup already minimises tracking by default (no advertising cookies, no cross-site tracking, anonymised analytics data).

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Website after any changes constitutes your acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Corporate Home Away South Limited (trading as TidyHacks)
Email: [email protected]
Registered address: 19 Fittleworth Close, Worthing, BN12 6NB, United Kingdom