Legal · United Kingdom

Privacy Policy

Last updated: October 18, 2026

Who we are

Ostrall UK ("we", "us", "our") is the UK edition of Ostrall, a shopping search service, at uk.ostrall.com. It is operated by Jarta Labs LLC (USA), which also runs ostrall.com, au.ostrall.com and ca.ostrall.com. Jarta Labs LLC is the controller of the information described here. This policy explains what is collected when you use uk.ostrall.com, why, how it is handled under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), and the rights you have. The other country sites have their own policies.

How to contact us

Questions about this policy, or requests to use any of your rights below, can be sent to Jarta Labs LLC through the feedback options on the site.

What we collect

To improve our search results, the site records these actions:

• Visits: that a page was opened, which kind (the home page, results or a product page), and whether it was on a phone or tablet or on a computer. We keep only "mobile" or "desktop", not your browser or device model.
• Searches: the text you type into the search box, or say into it with the microphone button. Speech is turned into text by your own browser (in Chrome by Google, in Safari by Apple), which may happen outside the UK; Ostrall only receives the words, the same as a typed search, and never your voice. A search that at least two different visitors to uk.ostrall.com have made in the last 90 days may be shown to others there as a suggestion while they type; a search only you made is never shown to anyone else, and searches from the other country sites are never suggested here. Your own recent searches are suggested only to you.
• Clicks: which product or shop you open from the results, and where it was in the list.
• Steps towards a product: the choices you make between searching and opening a shop, such as answering a question, picking a model, year or type, choosing a budget, adding a must-have, opening a product's specs or tapping "Show more".
• Ratings: when you rate results or a listing up or down, the reason you pick, what you tell us you were looking for if you choose to type it, what you write if you pick "Something else", and which listing it was (its title, shop, price and position), plus three signals that tell a person from a bot (whether your browser marked the click as a real one, how long after the results appeared you rated, and whether there was any real tap, click or key press on the page).
• A session code: a random code your browser makes each time it loads the page, so actions from one visit can be grouped together. It changes on every visit and is not linked to who you are.

We do not ask for, and do not store, your name, email address, phone number, location, IP address or payment details. Because search text is whatever you type, please don't put personal details such as names, addresses or account numbers into the search box. We treat these records as personal data under the UK GDPR even though they are not linked to who you are.

Your recent searches and the shops you hide from your results (the × in the Stores row) are kept only in your own browser on this device and are never sent to us. Clearing your browser's site data removes them. Ostrall UK has no accounts or sign-in yet; if we add them, we will update this page first.

Why we use it, and our lawful basis

We use this information only to run Ostrall UK and make it better at understanding what shoppers in the UK are looking for: finding searches we answered badly, learning which questions help, improving how results are ranked, and keeping the site safe from automated abuse. It is reviewed by automated checks and by people. We do not use it to build a profile of you, we do not use it for advertising or direct marketing, and we make no decisions about you based solely on automated processing that have legal or similarly significant effects. Our lawful basis is our legitimate interests (Article 6(1)(f) UK GDPR) in running, improving and protecting a free shopping search service; we collect only what those purposes need, and we have weighed them against your interests, which is why nothing that identifies you is collected.

Where it is kept

Ostrall UK's records are kept in their own database, separate from the other country sites', which our host Cloudflare places in its Western Europe region. Records from uk.ostrall.com are never mixed with or used for the other sites' results.

Processing outside the UK

Some processing is done by companies based in the United States, so information is transferred there:

• Prices: to show current prices, our server sends the product being searched for to SerpApi (USA), which returns current listings from shops that sell to the UK. Only the search words are sent. When you open a product, our server also asks SerpApi for that product's page at the shop, sending only the product's ID (nothing about you); the shop link is saved for up to 30 days so the next click doesn't need it again.
• Search planning: to work out what a new search is for (which questions to ask and how to sort results), our server sends the search words, and only the search words, to Anthropic (USA), whose Claude model returns a plan for that kind of search.
• Hosting: the site is served by Cloudflare (USA), which, like any web host, processes technical data such as IP addresses to deliver the site and protect it from attacks. We do not copy that data into our records.

Nothing that identifies you, such as your IP address or session code, is sent with the search words. Where a transfer to the US includes personal data, we rely on the UK Extension to the EU-US Data Privacy Framework for companies certified under it, or otherwise on the safeguards the UK GDPR allows, such as the International Data Transfer Addendum to the EU standard contractual clauses. Listings and plans are kept in our database (listings up to 90 days, though prices are only shown while under 7 days old; plans up to 30 days) and contain shop data, never anything about you.

Cookies and analytics

Ostrall UK uses no advertising or analytics cookies, and Google Analytics is not used on uk.ostrall.com; if that changes we will ask for your consent first and update this page. The site sets one cookie of its own, and only if you pick a country with the flags at the bottom of each page: os_country, which remembers only that choice (such as "uk") for a year, so you are not sent back to another country's site. It is set only because you asked for it, so it needs no separate consent under PECR. Otherwise your first visit to the home page goes to the site for the country your connection comes from, and no cookie is set. We may count page views with Cloudflare Web Analytics, which Cloudflare says sets no cookies, stores nothing on your device and does not track you across other websites; we see only totals.

Security and protecting against abuse

The site is served only over encrypted HTTPS connections, and our records are held by our host with access limited to the people who run Ostrall. Ratings shape how Ostrall answers everyone, so we only accept them from the Ostrall page itself, count each rating once per visit, limit how many any one visitor can send in an hour, and leave out ratings from visits that look automated. New price lookups cost money, so they are limited per visitor using a scrambled code made from your IP address, the current hour or day and a secret key only our server knows. The code can't be turned back into your IP address and is deleted within a day.

Shop sites

When you follow a link to a shop, you leave our site and the shop's own privacy policy and cookies apply there, including to anything you buy. See our Affiliate Disclosure.

Sharing

We do not sell or share this information with anyone for their own use. The companies above process it only to provide their service to us. We may disclose it if the law requires it, or to protect the rights or safety of our users or the public.

How long we keep it

We keep event records for up to 24 months, then delete them or reduce them to totals that cannot be tied to any visit.

Your rights

Under the UK GDPR you have the right to ask for access to personal data about you, and to ask us to correct it, erase it, restrict how we use it or give it to you in a portable form. Because our lawful basis is legitimate interests, you also have the right to object to our use of it. Because we don't collect anything that identifies you and the session code changes on every visit, we usually hold no record we could link back to you, so there may be nothing we can find; you can still ask, and you can stop all recording at any time by not using the site and clearing your browser's site data.

Complaints

If you think we have mishandled personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.

Children

Ostrall UK is a general shopping tool and is not directed at children under 13. We do not knowingly collect personal data from children.

Changes to this policy

If we change how Ostrall UK handles information, we will update this page and the "Last updated" date before the change takes effect.