This notice explains what personal data BankDetective collects, why, for how long and what your rights are. It is based on the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) also apply to cookies and similar technologies.
Last updated: 2 October 2026.
Who is responsible for your data
EOSSEO SAS, a French company, 285 C route de Margillan, 38530 Barraux, France. Registered with the Grenoble Trade and Companies Register (RCS) under number 821 053 543. Contact: hello@bankdetective.co.uk. EOSSEO has not appointed a data protection officer.
What data we process and why
You can read the site without registering. We do not ask for your name, address or bank details. The processing is as follows.
1. Server logs
When a page loads, the server records your IP address, the date and time, the URL requested, your browser and the page you came from. We use these logs to keep the site secure and to detect unusual access. Legal basis: legitimate interests (Article 6(1)(f) UK GDPR). Retention: twelve months.
2. Affiliate attribution
When you arrive on the site from an advertisement or an external link, the site stores a first-party cookie (bduktrk_v1, 30 days) holding the parameters of the campaign you came from (UTM parameters and the click identifiers of Meta, Google or Snapchat). When you click a link to a bank, we pass an identifier for your visit, and the campaign or page it came from, to our affiliate tracking provider, WeCanTrack B.V. (Netherlands), and to the affiliate network of the bank. This tells us which page or campaign led to an account opening, so that we can be paid the commission. It does not contain your name or your bank account details. Legal basis: legitimate interests in being paid for the service (Article 6(1)(f)). Retention of click records: 24 months.
3. Advertising measurement
The site uses the Meta Pixel (Meta, for Facebook and Instagram) and the Snapchat Pixel (Snap). These tools can record that you visited a page and that you clicked a link to a bank. We use them to measure the results of our advertising campaigns on those platforms. Meta and Snap receive this data, together with identifiers that they set, and handle it under their own privacy notices: Meta and Snap. They may transfer data outside the UK, including to the United States. Legal basis: legitimate interests in measuring and improving our advertising (Article 6(1)(f)).
4. Email
If you write to us, we keep your message and email address for as long as needed to reply and for twelve months after the last exchange at most. Legal basis: legitimate interests in handling your request.
Cookies and similar technologies
Regulation 6 of PECR covers storing information on your device, or accessing information already stored there. The site uses:
- technical cookies, needed for the site to work and for page caching;
- an attribution cookie,
bduktrk_v1, first-party, 30 days, described in section 2; - cookies and identifiers set by the Meta and Snapchat pixels, described in section 3.
You can block or delete cookies in your browser settings. Without technical cookies, some pages may not display correctly. You can also adjust your advertising preferences in your Meta and Snapchat accounts.
Who receives your data
We do not sell your data. It is handled for EOSSEO by OVH SAS (hosting, France) and WeCanTrack B.V. (affiliate tracking, Netherlands). Banks’ affiliate networks receive the click identifier described in section 2. Meta and Snap receive the measurement data described in section 3 and process it under their own notices.
Our website is hosted in the European Union. Data about visitors in the UK is therefore processed in France.
Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format (Articles 15 to 21 UK GDPR). Where we rely on your consent, you can withdraw it at any time.
To exercise these rights, write to hello@bankdetective.co.uk with “Data protection” as the subject. We reply within one month.
Complaints
You can complain to us if you think we have infringed data protection law (section 164A, Data Protection Act 2018). We acknowledge a complaint within 30 days and tell you the outcome without undue delay.
You can also complain to the data protection regulator, the Information Commission (formerly the Information Commissioner’s Office), at ico.org.uk/make-a-complaint (section 165, Data Protection Act 2018).
Children
The site is intended for people aged 18 or over. We do not knowingly collect data from children.
Changes to this notice
Any change is published on this page with its date. The version that applies is the one shown here when you visit.