Privacy Policy

This Privacy Policy explains how DVF Labs (trading as SME Compare, referred to in this policy as “we”, “us”, or “our”) collects, uses, holds, and discloses personal information when you use smecompare.co.uk (the “site”). We handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

SME Compare is an independent business-services comparison site operated by DVF Labs, the data controller for the personal information described in this policy. You can reach us via our contact form.

2. What information we collect

We collect the following categories of personal information:

Quote request information

When you submit a quote request through our comparison tools, we collect your business name, contact name, email address, phone number, website or social page (if provided), monthly volume, and any comparison inputs you have entered (such as your average transaction size or card mix). This information is shared with the providers you select so they can contact you with pricing. We do not share your details with providers you did not select.

Affiliate click tracking

When you click a link to a provider through our site, we log a cryptographic hash of your IP address (not the IP itself), your browser user-agent string, the page you clicked from, the provider you clicked, and any UTM parameters present in the link. This information helps us measure which providers convert and which sources of traffic refer paying customers.

Analytics

We use PostHog analytics with first-party cookies to understand how visitors use our site. These cookies help us recognise returning visitors and improve the experience. We do not track you across other websites. We do not share personal information with third parties for advertising purposes. You can clear cookies through your browser settings at any time.

Server logs

Like most websites, our hosting provider records standard server logs (IP address, request path, timestamp, user-agent) for security and debugging purposes. Logs are retained for a limited period.

3. Why we collect it

• To send your quote request to the providers you have selected.
• To respond to questions or feedback you send us.
• To measure the effectiveness of our comparisons and how providers perform on our site.
• To improve the accuracy, coverage, and usefulness of the comparison.
• To meet our legal and tax obligations.

4. How we use and disclose your information

We do not sell your personal information. We only share quote request details with the specific provider or providers you have asked to receive a quote from. Aggregate analytics and click data may be shared with payment providers in anonymised, non-identifying form (for example, “Provider X received 124 clicks last month”), but never with information that identifies you personally.

We may disclose personal information where required by law, in response to a lawful request from a regulator or court, or to protect our legal rights.

5. Direct marketing

If you submit a quote request, we may contact you by email to follow up on the quote, and the providers you selected will contact you directly with pricing.

When you submit a quote request you can also opt in to receive price change alerts and offers from SME Compare and our partners. This marketing consent is optional, is never required to request a quote, and you can withdraw it at any time using the unsubscribe link in any email or by sending us a message through our contact form.

6. Service providers and overseas disclosure

We use third-party service providers to operate the site, including cloud hosting and database providers, product analytics providers (PostHog), and transactional email providers, some of which are based in the United States. Where personal information is transferred outside the UK, we rely on appropriate safeguards recognised under the UK GDPR, such as the UK International Data Transfer Agreement or an addendum to standard contractual clauses, so that it receives an equivalent level of protection.

7. How we store and protect your information

We take reasonable steps to protect personal information against loss, misuse, unauthorised access, modification, and disclosure. Data is transmitted over HTTPS, stored at rest in a managed database with row-level access controls, and your IP address is hashed before being recorded with an affiliate click. Access to personal data is limited to people who need it to operate the site.

8. Cookies and similar technologies

We use first-party analytics cookies (PostHog) to recognise returning visitors and measure how the site is used. We do not use advertising cookies, and we do not share data with advertising networks. We may also use a small number of strictly necessary cookies that keep core functions of the site working, such as keeping an administrator signed in; these are not used to track you. You can control or disable cookies in your browser settings, though some parts of the site may not work as expected without the strictly necessary ones.

9. Accessing, correcting, or deleting your information

Under the UK GDPR you have the right to request access to the personal information we hold about you, ask us to correct it, ask us to delete it, or object to or restrict how we process it. Send your request via our contact form. We will respond within one month of receiving your request.

10. Complaints

If you believe we have mishandled your personal information, please contact us first via our contact form. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

11. Children

SME Compare is intended for business owners and is not directed at children under 18. We do not knowingly collect information from children.

12. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page indicates when it was last revised. If we make material changes, we will note them on this page and, where appropriate, notify you by email.

See also our Terms of Use.