Privacy policy
Last updated 29 August 2026.
This policy explains how DupeStack (“we”, “us”), the operator of dupestack.co.uk, handles personal data. We are established in the United Kingdom. For UK GDPR purposes we are the controller of data described below.
Contact: hello@dupestack.co.uk.
What we collect
Today the site is largely static. We do not run a customer account system.
- Theme preference — dark/light mode is stored in your browser (typically localStorage), not on our servers.
- Email you send us — if you write to hello@dupestack.co.uk, we process the contents to reply.
- Server logs — our host (AWS) may record standard request metadata such as IP address, user agent and URL, for security and reliability. Logs are retained only as long as needed for that purpose.
- Affiliate click-through — if you follow an Amazon link, Amazon may set its own cookies and process data under Amazon’s privacy notice. We receive aggregated referral reports, not a shopping profile of you.
We do not currently use Google Analytics, advertising pixels, or a marketing email list. If that changes, this policy will be updated first.
Legal bases
- Legitimate interests — running and securing the website.
- Contract / steps toward a contract — answering a message you send.
- Consent — only if we later introduce optional analytics or marketing; we will ask then.
Sharing
Hosting is on Amazon Web Services (London region where we control it). Affiliate merchants (Amazon) process data when you leave our site. We do not sell personal data.
Retention, rights and complaints
Email correspondence is kept only as long as needed to deal with your request and any follow-up. You may ask for access, correction, erasure, restriction or objection, and you may complain to the Information Commissioner’s Office.
See also cookies and affiliate disclosure.