Last updated: February 2026 · UK GDPR compliant
SalesWeather is operated by Zootaloot Studios, a UK business. For data protection purposes, we are the data controller for personal data collected when you subscribe to or use the platform.
Data controller: Zootaloot Studios, United Kingdom. Contact: [email protected]
| Data | Why | Legal Basis (UK GDPR) |
|---|---|---|
| Email address | Account access, login links, renewal reminders, service emails | Contract performance |
| Subscription status and dates | Access control, renewal management | Contract performance |
| Region preference (UK/US/CA/AU) | Show you relevant market data | Contract performance |
| IP address (per session) | Security monitoring, prevent unauthorised credential sharing | Legitimate interest |
| Login timestamps | Account security, abuse prevention, chargeback defence | Legitimate interest |
| Checkout consent record | Legal record of your digital content waiver at purchase | Legal obligation |
We do not collect names, postal addresses, phone numbers, browsing history outside our platform, or any special category data.
We do not sell, rent, or share your personal data with any third party for marketing purposes. We do not use your data for advertising. We do not build profiles for resale. We do not use tracking pixels or third-party analytics that share your data externally.
| Processor | What They Handle | Their Policy |
|---|---|---|
| Stripe | Payment processing, card data, billing records | stripe.com/privacy |
| Krystal Hosting | Server infrastructure, file storage | krystal.io/legal |
These processors act under their own privacy policies for the data they handle. We do not control their data practices beyond our contractual agreements with them.
| Data | Retention Period |
|---|---|
| Email and subscription record | Duration of subscription + 2 years (for legal and accounting purposes) |
| IP session logs | 90 days rolling |
| Checkout consent record | 5 years (legal obligation, chargeback defence) |
| Renewal reminder records | 12 months |
After retention periods expire, data is securely deleted from our systems.
SalesWeather uses browser localStorage (not traditional cookies) to store your session token and region preference locally on your device. This data never leaves your browser to a third party. It is used solely to keep you logged in and remember your region setting.
We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required because we do not set non-essential cookies.
To exercise any right, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.
We use HTTPS encryption for all data in transit. Session tokens are stored server-side and validated on each request. IP-based session monitoring detects and flags suspicious concurrent access. Payment data is handled entirely by Stripe and never touches our servers.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected subscribers without undue delay, as required by UK GDPR.
SalesWeather is operated from the UK. If you access the platform from outside the UK, your data is still processed under UK GDPR standards. Stripe may process payment data in the US under standard contractual clauses that meet UK adequacy requirements.
We may update this Privacy Policy from time to time. If we make material changes, we will notify subscribers by email. The date at the top of this page reflects when it was last updated. Continued use of the platform after changes constitutes acceptance of the updated policy.