Privacy Policy

Last updated: 4 March 2026

This policy explains what personal data Ardlight collects, why we collect it, how we use it, and your rights under UK law. We have tried to write it in plain English rather than legal jargon.

Who we are

Ardlight is a UK personal finance website. The website is accessible at ardlight.com.

For the purposes of UK data protection law, Ardlight is the data controller for personal data collected through this website.

If you have any questions about this policy or how we handle your data, you can contact us at: [email protected]

What data we collect and why

We collect personal data in the following ways:

Analytics data (Google Analytics)
When you visit ardlight.com, Google Analytics automatically collects data about your visit including your approximate location (country/city level), the device and browser you are using, pages you visit, how long you spend on each page, and how you arrived at the site. This data is anonymised and aggregated — we cannot identify you individually from it.

We use this information to understand how people use the site and to improve its content and design. The legal basis for this processing is our legitimate interests in understanding and improving our service.

Email address (if you subscribe)
If you choose to subscribe to receive notifications or updates from Ardlight, we collect your email address. We use this solely to send you the communications you signed up for. The legal basis is your consent, which you can withdraw at any time by unsubscribing.

Ardlight Score quiz responses
When you complete the Ardlight Score quiz, your answers are processed to generate your score and action plan. If you choose to receive your results by email, your email address is collected. Quiz responses are processed locally in your browser — they are not stored on our servers unless you choose to submit your email. The legal basis for email collection is your consent.

Contact enquiries
If you contact us directly by email, we retain your email address and the content of your message in order to respond to you. The legal basis is our legitimate interests in responding to communications.

Cookies

Ardlight uses cookies. A cookie is a small text file stored on your device when you visit a website.

We use the following cookies:

• Google Analytics cookies (_ga, _ga_*) — these track your visit for analytics purposes as described above. They are set by Google and governed by Google's privacy policy. These cookies persist for up to 2 years.

We do not use advertising cookies, tracking pixels for advertising networks, or any cookies for remarketing purposes.

How we share your data

We do not sell your personal data. We do not share your personal data with third parties for marketing purposes.

We share data with the following service providers who act as data processors on our behalf:

• Google Analytics (Google LLC) — for website analytics. Google may transfer data to the United States under appropriate safeguards. See Google's privacy policy.
• Netlify — our website hosting provider. Netlify processes server access logs which may include your IP address. See Netlify's privacy policy.

We may also disclose your data if required to do so by law, or to protect the rights, property or safety of Ardlight or others.

Affiliate links

Some links on Ardlight are affiliate links — if you click through and open an account or make a purchase, we may earn a commission. Clicking an affiliate link does not result in any additional personal data being collected by us. The third-party site you visit will have its own privacy policy which we encourage you to read.

How long we keep your data

• Analytics data — retained for 14 months in Google Analytics, after which it is automatically deleted.
• Email subscribers — retained until you unsubscribe, after which your email is removed within 30 days.
• Contact emails — retained for up to 2 years, then deleted.

Your rights under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate personal data.
• Right to erasure — you can ask us to delete your personal data in certain circumstances.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request your data in a portable format in certain circumstances.
• Right to object — you can object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

Children

Ardlight is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

How to complain

If you are unhappy with how we have handled your personal data, please contact us in the first instance at [email protected] and we will do our best to resolve the issue.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO):