Privacy policy

Last updated: 17 May 2026

This site is operated for UK readers and complies with UK GDPR, the Data Protection Act 2018, and EU GDPR where applicable.

Who runs this site (data controller)

Recharge UK (rechargevodafone.co.uk) is published by Rafael Tuñón Sánchez, operating as a sole trader based in the United Kingdom. For all data protection matters, the data controller is Rafael Tuñón Sánchez, contactable at privacy@rechargevodafone.co.uk or admin@rechargevodafone.co.uk. This site is an independent UK consumer-information publication and is not affiliated with, endorsed by, or sponsored by Vodafone Group plc or any other brand mentioned in editorial articles.

What this site is

Recharge UK publishes fact-checked guides on UK consumer prices, telecom how-to instructions, advert cast and music identification, and welfare information. We do not sell products, do not process payments, and do not run a paid backend with user accounts.

Data we collect and the lawful basis for each

We deliberately collect as little personal data as possible. For every category below, we state the lawful basis under UK GDPR Article 6.

  • Google Analytics 4, only if you consent (lawful basis: consent, Article 6(1)(a)). We use Consent Mode v2, with all storage denied by default. Google Analytics will only set the _ga and _ga_* cookies if you click "Accept" in the cookie banner. Before you accept (or if you decline), Google receives no identifiable data from you. IP addresses are anonymised before processing. We do not share the data with Google Ads, do not enable Google Signals, and do not use the data for advertising. Data retention in GA4 is set to 2 months, the platform minimum.
  • Anonymous usage analytics via Cloudflare Web Analytics (lawful basis: legitimate interest, Article 6(1)(f), measuring site performance with no cookies or cross-site tracking). Cookieless, no individual tracking, aggregates only page views and Core Web Vitals.
  • Comments you submit (lawful basis: legitimate interest, Article 6(1)(f), running the public commenting feature). We store the name you typed, the comment text, and a timestamp. We do not require an email to comment. Stored in Cloudflare Workers KV. Retained for up to 2 years from submission, or until you ask us to delete it.
  • Feedback votes (lawful basis: legitimate interest, Article 6(1)(f)). If you click "Yes / Not really" at the end of an article, we store your vote (and any optional comment) along with the article slug and a timestamp. Not linked to your identity. Retained for up to 2 years.
  • CAPTCHA verification via Cloudflare Turnstile (lawful basis: legitimate interest, Article 6(1)(f), preventing spam and abuse). Turnstile checks for bots without cookies or fingerprinting. Loaded on demand only when you interact with the comment form.
  • Server logs (Cloudflare) (lawful basis: legitimate interest, Article 6(1)(f), security and abuse prevention). IP address, user agent, request path. Retained for a maximum of 30 days. Not used for analytics.

Cookies

We use cookies only with your explicit consent. The cookie banner asks you to choose; the default is denied. If you accept, Google Analytics 4 sets the _ga and _ga_W6RVYC2SJR cookies for analytics aggregation (expire after 2 years). If you decline, no analytics cookies are set.

Cloudflare may set a single technical cookie (__cf_bm) for bot management that auto-deletes within 30 minutes; this is classified as strictly necessary under UK PECR and is not optional.

We also use localStorage (not cookies) for: (a) your cookie consent choice (rrr_consent_v1, retained until you clear browser data), (b) remembering that you've voted on an article, and (c) saving unsent comment drafts. This data stays on your device, we cannot read it remotely.

You can change your consent choice anytime via "Manage cookies" in the footer. For full details see our cookie policy.

AI training and content scraping

This site is publicly accessible and our content may be read by third-party AI training crawlers (such as OpenAI's GPTBot, Anthropic's ClaudeBot, Perplexity, Google-Extended, Common Crawl, and others). Our robots.txt currently allows these crawlers because we want our fact-checked UK consumer guides to be cited by AI search engines as authoritative sources, which directly benefits the readers searching for these answers in tools like ChatGPT, Claude, Perplexity and Microsoft Copilot.

What we publish is editorial content, not personal data. Article text, author bylines, and embedded videos are all public-facing and authored or licensed for publication. Personal data submitted via comments is not exposed to AI crawlers in any aggregated form beyond its rendered appearance on the public page.

If you have authored a comment and want it excluded from future AI crawls, contact us at privacy@rechargevodafone.co.uk and we will delete it. We will also update robots.txt rules at our discretion if AI training norms change or new crawlers appear that we do not wish to permit.

Where data is stored and international transfers

  • The static site itself is served from Cloudflare's global edge network (Cloudflare Pages).
  • Comments and feedback are stored in Cloudflare Workers KV. Cloudflare offers EU data residency for KV; this site uses Cloudflare's default global KV with EU and UK regions in scope.
  • For any international data transfer required by Cloudflare's edge network (e.g. a visitor's IP being processed at a non-UK/EU edge for content delivery), Cloudflare relies on the European Commission's Standard Contractual Clauses (SCCs) and UK Addendum, plus its global security and privacy certifications. See Cloudflare's Data Processing Addendum for the full contractual basis.
  • Google Analytics (only if you consent): data may be processed by Google in the US under the EU-US Data Privacy Framework and equivalent UK Extension.

Third-party services we use

  • Cloudflare (Pages, Workers, Workers KV, Web Analytics, Turnstile), hosting, edge functions, anonymous analytics, anti-bot. Bound by SCCs as described above. Cloudflare's privacy policy.
  • Google Analytics 4 (only after you accept), aggregated usage analytics. Google's privacy policy. Opt-out also available with the Google Analytics Opt-out Browser Add-on.
  • YouTube, when you click "play" on an embedded video, your browser connects to YouTube via the privacy-enhanced youtube-nocookie.com domain. We don't load any YouTube tracking until you click play.
  • Pagefind, search index served from this same site, no external service.

What we don't do

  • No advertising networks, ad pixels, or retargeting.
  • No cross-site tracking.
  • No selling or sharing of your data with third parties.
  • No personalised email lists. We don't send marketing emails from this site.
  • No fingerprinting or device identification.

Affiliate links

Some pages contain affiliate links to Amazon UK and other retailers. When you click these and make a purchase, the retailer may pay us a small commission at no extra cost to you. The retailer (not us) sets cookies on their domain at that point. Read our full affiliate disclosure.

Your rights (UK GDPR + EU GDPR)

Under UK GDPR, EU GDPR (where applicable), and the Data Protection Act 2018, you have the right to:

  • Access any personal data we hold about you (almost certainly: nothing, unless you've commented).
  • Rectification: ask us to correct or delete your comment, feedback vote, or any data linked to you.
  • Erasure ("right to be forgotten"): request deletion of your data.
  • Restriction of processing: limit what we do with your data while a dispute is resolved.
  • Data portability: receive your data in a structured, commonly used format.
  • Object to processing based on legitimate interest.
  • Withdraw consent for data processing at any time (where consent is the lawful basis).
  • Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk), or with your local EU supervisory authority if you reside in the EU.

Contact

For privacy questions or to exercise your rights, contact the data controller at privacy@rechargevodafone.co.uk (forwarded to Rafael Tuñón Sánchez's personal inbox). We respond within 30 days as required by UK GDPR.

Changes to this policy

We update this policy when our practices change or when the law requires it. Material changes will be flagged at the top of the page. The "last updated" date above always reflects the most recent revision.