Last updated: 8 October 2025

Privacy & Cookies Policy (with Advertiser Accounts)

We respect your privacy and only collect the information we need to operate Cookalo effectively. This policy explains what we collect, why we collect it, and how you can manage it.

1. Introduction

Totally Online Ltd operates Cookalo in accordance with UK law and the UK GDPR. We act as the data controller for personal information collected through the platform and only hold data that is necessary to deliver and improve our services.

2. What information we collect

Visitors

  • Analytics data (pages visited, browser type, and similar usage information)
  • Cookie preferences and consent choices
  • Contact details if you message us

Advertisers

  • Account details (name, email, business name)
  • Listing information and photos you upload
  • Payment and billing details handled securely by our payment processor (we do not store card numbers)

3. How we use your information

We use data to:

  • operate and improve Cookalo;
  • manage your account or listing;
  • communicate with you about renewals or support;
  • analyse site performance (anonymously); and
  • comply with legal or tax obligations.

We never sell personal data.

4. Legal basis for processing

Our processing is based on:

  • consent (when you opt in to emails or cookies);
  • contract (to provide and maintain listings); and
  • legitimate interest (to run analytics and protect our platform).

5. Cookies

We use cookies to keep the site running smoothly and to understand how it is used. Analytics and marketing cookies only run with consent. You can change or withdraw cookie consent at any time.

6. Payments

Payments for listings are processed by our payment processor. We do not store credit card numbers on our servers. Our processor complies with PCI-DSS security standards.

7. Google data

Where we show Google reviews or ratings, they are displayed under Google’s terms and are subject to Google’s privacy policy.

8. Data storage and security

We store data securely in the UK/EU using encrypted servers and restrict access to authorised personnel only. We keep data only as long as necessary for business or legal purposes.

9. Your rights

You can:

  • request a copy of your data;
  • ask us to correct or delete it; or
  • withdraw consent for marketing.

Contact hello@cookalo.com for any requests.

10. Third-party links

Cookalo links to external providers. Their privacy practices are independent of ours, so please review their policies when visiting those sites.

11. Updates

We may update this policy from time to time. The most recent version will always be available on this page.