How we protect and handle your personal data
Under the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018, you have comprehensive rights over your personal data. We are committed to protecting your privacy and providing transparent information about how we handle your data.
HITSENSE LTD (trading as "aclue") operates as the data controller for personal data processed through our platform. We are responsible for determining how and why your personal data is processed.
Under GDPR, we must have a legal basis for processing your personal data. Here are the legal bases we rely on:
Processing necessary to provide our gift recommendation service, maintain your account, and deliver the core platform functionality.
Processing necessary for our legitimate business interests, such as improving our service, analytics, security, and fraud prevention.
Processing based on your explicit consent, which you can withdraw at any time through your account settings.
Processing necessary to comply with legal obligations, such as tax requirements and regulatory compliance.
We use your personal data for the following purposes:
Providing AI-powered gift recommendations, managing your account, and delivering core platform features
Tailoring recommendations based on your preferences, improving suggestion accuracy over time
Sending service updates, responding to inquiries, providing customer support
Meeting legal obligations, maintaining records, complying with regulations
Analysing usage patterns, improving our algorithms, enhancing user experience
Protecting your account, detecting suspicious activity, maintaining platform security
Sending promotional emails, product updates, and relevant offers (only if you've opted in)
Tracking affiliate link performance to support our free service model
We never sell, rent, or trade your personal data to third parties for their marketing purposes.
We share data with trusted service providers who help us operate our platform:
We may disclose your data if required by law, legal process, or to protect our rights, your safety, or the safety of others.
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, subject to the same privacy protections.
Your data may be transferred to and processed in countries outside the UK/EU. We ensure adequate protection through:
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Data | Until account deletion + 30 days | Service provision and security |
| Preference Data | Until account deletion | Personalisation and recommendations |
| Usage Analytics | 26 months (aggregated data permanent) | Service improvement and analytics |
| Communication Records | 6 years | Legal compliance and support |
| Transaction Data | 7 years | Tax and legal compliance |
Anonymised Data: We may retain anonymised and aggregated data indefinitely for research and service improvement purposes, as it cannot be used to identify you.
Under GDPR and UK data protection law, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you and information about how we process it.
Correct any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data in certain circumstances.
Receive your personal data in a structured, machine-readable format.
Limit how we process your personal data in certain circumstances.
Object to processing based on legitimate interests or for direct marketing.
Withdraw your consent for processing at any time where we rely on consent.
Lodge a complaint with the Information Commissioner's Office (ICO) if you're unsatisfied.
ICO ComplaintsWe implement appropriate technical and organisational measures to protect your personal data:
In the unlikely event of a data breach affecting your personal data, we will notify you and the relevant authorities within 72 hours as required by GDPR.
If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your data:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
Last updated: 8 December 2025