Legal
Privacy Policy
This policy explains what personal data vwrp.co.uk collects, why we collect it, who we share it with, how long we keep it, and the rights you have under UK data protection law.
Who we are
vwrp.co.uk ("VWRP", "we", "us") is an independent website publishing research, comparisons and guides about exchange-traded funds and investment platforms for UK investors. We are not affiliated with Vanguard.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for your personal data is VWRP (vwrp.co.uk).
You can contact us about this policy or your personal data at [email protected].
Data we collect
Data you give us
- Contact form: your name, email address, subject and message when you use our contact page.
- Email, phone or WhatsApp: your contact details and the content of your message if you contact us directly.
Data collected automatically
- Technical data: IP address, browser type and version, device type, operating system, time zone and language settings.
- Usage data: pages visited, time on page, links clicked, the website that referred you, and general location (country or city) derived from your IP address.
- Cookie and device identifiers: see section 4.
We do not ask for, and you should not send us, special category data (for example health information) or financial account details. We never ask for passwords or investment account logins.
How and why we use your data
We only use personal data where UK GDPR gives us a lawful basis.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Replying to your enquiry or feedback | Name, email, message | Legitimate interests (answering people who contact us) |
| Running the website securely, preventing spam, fraud and attacks | Technical data, IP address | Legitimate interests (keeping the site available and safe) |
| Measuring visits and improving our content | Usage data, analytics cookies | Consent |
| Showing advertising, including personalised ads | Advertising cookies, device identifiers, IP address | Consent |
| Tracking referrals to partner websites through affiliate links | Click data, partner cookies | Consent |
| Meeting legal obligations and handling legal claims | Any relevant data | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can object at any time (see section 9). Where we rely on consent, you can withdraw it at any time through our cookie settings, without affecting processing that took place before.
Cookies and similar technologies
Cookies are small files stored on your device. Under the Privacy and Electronic Communications Regulations (PECR), we only set non-essential cookies with your consent. You can accept, reject or change your choices at any time using the cookie settings link on our site, and you can also block or delete cookies in your browser.
| Category | Provider | Examples | Purpose |
|---|---|---|---|
| Strictly necessary | vwrp.co.uk, Cloudflare | __cf_bm, cf_clearance, consent preference cookie | Security, bot protection, remembering your cookie choices. No consent needed. |
| Analytics | Google Analytics (via Google Site Kit) | _ga, _ga_* | Counting visits and understanding how pages are used. |
| Advertising | Google AdSense | __gads, __gpi, IDE | Serving ads, limiting repeats, measuring ad performance, and personalising ads if you consent. |
| Embedded content | TradingView, Google Fonts | Set by the provider | Showing live price charts and loading fonts. These providers receive your IP address. |
| Affiliate tracking | Partner websites | Set by the partner after you click | Recording that you arrived from our site so we can be paid a commission. |
Cookie names and lifetimes are set by each provider and may change. Analytics and advertising cookies typically last up to 13 months.
Advertising and affiliate links
Google AdSense
We use Google AdSense to show adverts. Google and its partners may use cookies to show ads based on your previous visits to this and other websites. You can manage personalised advertising at Google Ad Settings and read how Google uses data at How Google uses information from sites that use its services.
Affiliate links
Some links on our site are affiliate links to investment platforms and other providers. If you click one, the partner may set a cookie to record the referral. We do not receive your name, email or account details from partners; at most we receive aggregated reports of clicks, sign-ups and commissions. Once you are on a partner's website, its own privacy policy applies.
Who we share your data with
We do not sell your personal data. We share it only with service providers who help us run the website, and only as needed:
- Web hosting provider – stores the website and server logs.
- Cloudflare, Inc. – content delivery, security and bot protection.
- Google LLC / Google Ireland Ltd – AdSense advertising, Analytics and Search Console (through Site Kit), and Google Fonts.
- TradingView, Inc. – embedded price charts.
- Email provider – receiving and replying to messages sent to us.
- WhatsApp (Meta Platforms) – only if you choose to message us on WhatsApp.
- Affiliate partners and networks – referral tracking, as described in section 5.
We may also disclose data if required by law, to protect our rights, or to a buyer if the website is sold.
International transfers
Some of our providers, including Google, Cloudflare, Meta and TradingView, process data outside the UK, mainly in the United States and the European Economic Area. Where data leaves the UK, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework for certified US companies) or on the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
How long we keep your data
| Data | Retention |
|---|---|
| Contact form messages and emails | Up to 24 months after our last exchange, unless needed longer for a legal claim |
| Server and security logs | Usually up to 30 days, depending on the hosting and security provider |
| Analytics data | Up to 14 months, under our Google Analytics retention setting |
| Cookies | As set by each provider; see section 4 |
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data in certain circumstances.
- Restrict how we use your data.
- Object to processing based on legitimate interests.
- Data portability for data you gave us, where processing is based on consent or contract.
- Withdraw consent at any time, for example to analytics or advertising cookies.
To use any of these rights, email [email protected]. We will reply within one month. We may ask you to confirm your identity before acting on a request.
Security
The website is served over an encrypted HTTPS connection and protected by Cloudflare's security services. We limit access to personal data to people who need it and keep software up to date. No internet transmission is completely secure, so we cannot guarantee the security of data you send to us.
Children
Our content is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
Other websites
Our pages link to fund providers, investment platforms, data sources and other websites. We are not responsible for their privacy practices. Please read the privacy policy of any site you visit.
Changes to this policy
We may update this policy when our services, providers or the law change. The "last updated" date at the top shows when it was last revised. Significant changes will be highlighted on this page.
Contact us
For any question about this policy or your personal data, contact us: