Legal · Your data, explained

Privacy Policy

How BroadbandSwitch.uk collects, uses and protects your personal data. We keep things minimal, we keep things safe, and we never sell your information.

Quick summary

The short version. BroadbandSwitch.uk is a free, UK focused broadband comparison service operated by Upleashed Limited, an Isle of Man company. We collect only the minimum personal data needed to help you compare and switch broadband, and we never sell your information to anyone. Strictly necessary cookies keep the site running, while analytics and affiliate attribution cookies are only used after you give consent in our cookie banner. When you run a postcode search, that lookup is powered by our comparison technology partner, stickee Technology Limited. You have strong rights under the UK GDPR and Isle of Man data protection law, including access, correction, erasure and the right to complain. Anything to ask? Email our data protection team at dpo@searchswitchsave.com and a real human will reply.

Who we are

BroadbandSwitch.uk is a trading name of Upleashed Limited. We are the data controller for personal data collected through this website. Here are the details you may need.

The laws that protect you

Two connected legal frameworks apply to how we handle your personal data, and you get the benefit of both.

UK law. Because we offer our service to people in the United Kingdom, the UK General Data Protection Regulation and the Data Protection Act 2018 apply to that processing. The Privacy and Electronic Communications Regulations 2003, as amended by the Data (Use and Access) Act 2025 with effect from 5 February 2026, govern our use of cookies and similar technologies. The UK Information Commissioner's Office supervises these rules.

Isle of Man law. Upleashed Limited is established in the Isle of Man, so the Island's Data Protection Act 2018, the Data Protection (Application of GDPR) Order 2018 and the GDPR and LED Implementing Regulations 2018, together known as the Applied GDPR, also govern our processing. The Isle of Man Information Commissioner supervises these rules and maintains the register on which we appear. The European Commission has recognised the Isle of Man's data protection framework as providing an adequate level of protection since 2004.

Scope of this policy

This policy explains how we handle personal data collected through the BroadbandSwitch.uk website, our customer service interactions by email, phone and chat, and any related landing pages we operate. It applies to visitors, comparison users, newsletter subscribers and people who get in touch with us.

It does not cover the privacy practices of broadband providers, third party retailers or other websites we link to. When you click through to a provider to complete a switch, that provider becomes the controller of the data you give them, under their own privacy policy. We always recommend skimming theirs too before signing up.

The personal data we collect

We try to keep things lean. Here are the categories of personal data we may collect, with examples and where they come from.

We do not knowingly collect special category data, such as health, religion or biometric information, and we ask you not to send it to us. If you do, we will delete it as soon as practical.

How we use your data and our lawful bases

Under the UK GDPR and the Applied GDPR, every use of personal data must rely on a lawful basis under Article 6. Here is a clear breakdown of why we process data, what we use, the basis we rely on and how long we keep it.

Since 5 February 2026, UK law permits some low risk statistics and appearance cookies to run without consent under strict conditions. We have chosen to keep a consent first approach anyway, because we think asking is the right thing to do. If we ever want to use your data for a new purpose that is not compatible with these, we will tell you and ask for your consent first.

The comparison journey and our technology partner

The postcode comparison tool on this site is powered by stickee Technology Limited, a UK comparison technology company. When you enter your postcode or address and browse live deals, that information is processed by stickee's platform to check which providers and packages serve your address and to return current prices. If you click through to order, an attribution record is created so the provider knows the referral came from us.

We do not use your postcode searches to build a marketing profile of you. stickee processes comparison data under contractual safeguards that meet Article 28 of the UK GDPR, and its own privacy policy and cookie policy are published at stickee.co.uk.

Cookies and similar technologies

We use a small set of cookies and similar technologies, such as local storage, to make the site work, measure how it performs and credit our partners when you switch through one of their links. Strictly necessary cookies are always on because the site needs them. All other cookies require your consent through our cookie banner, which you can change at any time.

For the full list of names, providers, durations and purposes, please see our Cookies Policy.

Sharing your data

We share personal data only with carefully chosen processors and partners, and only as much as they need to do their job. We never sell your personal data, and we never let third parties use it for their own marketing.

• Comparison technology: stickee Technology Limited powers the postcode comparison journey, as described above.
• Connection diagnostics: some tools, including the GTA 6 readiness test, measure latency and throughput against Cloudflare's public speed endpoints at speed.cloudflare.com. Your IP address and up to about 120 MB of test traffic may reach Cloudflare for the duration of the test. Nothing from that probe is stored on our servers, and scores stay in your browser session only.
• Hosting and CDN: the providers that run our servers and deliver our pages quickly and securely.
• Analytics: Google Analytics 4 (Google LLC), which uses pseudonymised identifiers and runs only with your consent. The exact cookies and durations are listed in our Cookies Policy.
• Email platform: the service we use to send our newsletter and transactional emails.
• Consent management platform: records and respects your cookie choices.
• Affiliate networks: when you click a partner link, an attribution record is shared so the partner knows the click came from us, only with your consent.
• Professional advisers: our accountants, auditors and legal advisers, bound by confidentiality.
• Regulators and authorities: only where we are legally required to disclose, for example to the Information Commissioner's Office, the Isle of Man Information Commissioner, HMRC or law enforcement.

We bind every processor under a written contract that meets UK GDPR Article 28, including security obligations, breach reporting, sub processor controls and assistance with your rights requests.

International transfers

Most of our processing happens within the UK, the Isle of Man and the European Economic Area. Where a processor is based in another country, we transfer personal data only when one of the recognised safeguards is in place.

• Adequacy regulations: for transfers to countries recognised as offering an adequate level of protection, such as the EEA, and the US under the UK Extension to the EU-US Data Privacy Framework for certified organisations.
• International Data Transfer Agreement: the UK's standalone transfer contract.
• UK Addendum to the EU Standard Contractual Clauses: used together with the EU SCCs for transfers to countries without adequacy.
• Transfer risk assessments: we document a TRA for each destination without adequacy, with extra safeguards such as encryption and access controls where needed.

If you would like a copy of the safeguards we rely on for a specific transfer, just ask.

How long we keep data

When a retention period ends we either securely delete the data or anonymise it so it no longer identifies you.

Your rights

You have eight headline rights when it comes to your personal data. We aim to make exercising them genuinely easy.

1. Right of access: ask for a copy of the personal data we hold about you.
2. Right to rectification: ask us to correct anything that is inaccurate or incomplete.
3. Right to erasure: ask us to delete personal data where there is no good reason for us to keep it.
4. Right to restriction: ask us to pause processing while we sort out a query.
5. Right to data portability: ask us to send certain data to you, or to another provider, in a machine readable format.
6. Right to object: object to processing based on legitimate interests, including direct marketing, which we will always stop.
7. Right to withdraw consent: change your mind at any time where we relied on consent, such as cookies or newsletter sign up.
8. Right to complain: raise a complaint with the UK Information Commissioner's Office or the Isle of Man Information Commissioner.

How to exercise your rights

The fastest route is to email dpo@searchswitchsave.com with a brief description of your request. We may need to verify your identity before we proceed, which protects you from impersonation. We respond within one calendar month, and where requests are complex we may extend by up to two further months and tell you why. Most requests are free. We may charge a reasonable fee or refuse where a request is manifestly unfounded or excessive, but in practice that is very rare.

Security

We take security seriously. Our measures include HTTPS across the whole site, encryption in transit using TLS 1.2 or higher, encryption at rest where supported by the platform, role based access control, multi factor authentication for staff, regular software patching, structured logging and a documented incident response plan.

If we ever experienced a personal data breach that posed a risk to you, we would notify the relevant supervisory authority within 72 hours and tell you directly when the law requires it. No system is perfectly secure, but we work hard to reduce risk and learn from every issue.

Children

Our service is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact dpo@searchswitchsave.com and we will delete it promptly.

Automated decision making

We do not carry out automated decision making, including profiling, that produces legal or similarly significant effects on you. Our comparison tables and ranking algorithms are designed to inform your choice, not to make decisions for you, and a human is always in the loop on editorial decisions. How we order results is explained in how we rank broadband deals.

Changes to this policy

We may update this policy from time to time, for example when we introduce a new feature, change a processor or reflect updates in the law. When we do, we will revise the last updated date at the top of the page. If the changes are significant, we will give a clearer heads up by email where you have given consent, or with a banner on the site. We keep an internal version history so we can show what changed and when, on request.

Contact and complaints

If you have a question, request or concern, please get in touch. We will always try to put things right ourselves first, and we acknowledge data protection complaints within 30 days.

Frequently asked questions

References

Sources we relied on when preparing this policy, in APA style.

1. Data Protection Act 2018, c. 12 (UK). https://www.legislation.gov.uk/ukpga/2018/12/contents
2. Data Protection Act 2018 (Isle of Man). https://legislation.gov.im/cms/
3. Data (Use and Access) Act 2025, c. 18 (UK). https://www.legislation.gov.uk/ukpga/2025/18/contents
4. Information Commissioner's Office. (n.d.). Guide to the UK General Data Protection Regulation (UK GDPR). https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
5. Information Commissioner's Office. (2026). Guidance on the use of storage and access technologies. https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-the-use-of-storage-and-access-technologies/
6. Information Commissioner's Office. (n.d.). International data transfer agreement and guidance. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/
7. Isle of Man Information Commissioner. (n.d.). Register of controllers and processors. https://www.inforights.im/
8. The GDPR and LED Implementing Regulations 2018 (Isle of Man). https://www.gov.im/about-the-government/data-protection-gdpr-on-the-isle-of-man/
9. The Privacy and Electronic Communications (EC Directive) Regulations 2003, SI 2003/2426 (UK). https://www.legislation.gov.uk/uksi/2003/2426/contents
10. Stickee Technology Limited. (2024). Cookie policy. https://www.stickee.co.uk/the-small-print/cookie-policy/
11. stickee Technology Limited. (n.d.). Privacy policy. https://www.stickee.co.uk/the-small-print/privacy-policy/

Related policies: Terms of Use · Cookies Policy · Accessibility statement · Affiliate disclosure · Editorial policy · AI and automation disclosure