Privacy Policy
Last updated: 15 October 2026
This policy explains how TestedTools uses personal data when you visit testedtools.dev, subscribe to our digest, contact us, buy from us, or receive an email from us.
Who we are
TestedTools is a trading name of Raj Devsi, a sole trader, at 4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB, United Kingdom. Raj Devsi is the controller of your personal data. Contact: hello@testedtools.dev. Raj Devsi also runs SaaS Deal Radar (saasdealradar.com) as a separate trading name. We don't share TestedTools subscriber lists with SaaS Deal Radar or use them for it.
What we collect, why, and our lawful basis
| Data | When | Why | Lawful basis (UK GDPR Art 6) | How long we keep it |
|---|---|---|---|---|
| Email address, signup page and time | You subscribe to the digest | To send the weekly digest (which may include a labelled sponsor block) | Consent (PECR reg 22 and Art 6(1)(a)). Withdraw it any time with the unsubscribe link | Until you unsubscribe, then kept on a suppression list so we don't email you again |
| Name, email, tool URL, chosen slot, message | You send a sponsor enquiry | To reply and arrange a booking | Legitimate interests in answering business enquiries (Art 6(1)(f)); contract steps if you book (6(1)(b)) | 24 months after our last contact, unless you become a customer |
| Name, email, company, website, billing country, payment details (handled by Stripe) | You buy a sponsor slot, Fast-Track Review or the Stack Kit | To take payment, deliver, give receipts and handle refunds | Contract (6(1)(b)); legal obligation for tax records (6(1)(c)) | 6 years after the end of the tax year (HMRC record-keeping) |
| Business contact details (generic company addresses such as press@ or partners@, and any name you publish) | We email a tool's maker about its listing | To tell you about your tool's page, correct facts, and offer optional paid services | Legitimate interests (6(1)(f)): see "Business outreach" below | Until you opt out; your address then goes on our do-not-contact list |
| Do-not-contact list | You opt out or unsubscribe | To make sure we never email you again | Legal obligation and legitimate interests | For as long as we send email |
| Emails you send to hello@ | You email us | To reply | Legitimate interests | 24 months |
| Basic server logs (IP address, user agent, time) | You visit the site | Security and keeping the site running (our host, Vercel, processes these) | Legitimate interests | For a short period, under Vercel's own retention policy |
We don't sell personal data, use advertising trackers or profile you.
Business outreach (where we didn't get your details from you)
We get generic business addresses from tool makers' own public websites. We email companies (for example Ltd and LLP businesses) at most twice: one intro and one follow-up. We don't send unsolicited marketing to sole traders or individuals. Every email names us, gives our address and has a one-click unsubscribe. We've weighed our interest in keeping listings accurate and offering relevant services against your privacy: the contact is low-volume, business-related and easy to stop. To opt out, reply "no thanks", use the link, or email hello@testedtools.dev.
Who we share data with (processors)
- Vercel Inc.: website hosting, serverless functions and private file storage (Vercel Blob) for subscriber records, enquiries and the do-not-contact list.
- Resend: sending email and holding the subscriber list (our sending region is the EU, Ireland: eu-west-1).
- Stripe: payment processing. Stripe is an independent controller for some payment data; see stripe.com/privacy.
- GitHub: source-code hosting (no subscriber data is stored there).
- Our virtual office provider: receives post addressed to us.
- Our professional advisers (accountant, solicitor) when needed, and authorities if the law requires it.
International transfers
Some providers (for example Vercel and Stripe) are based in, or process data in, the USA and other countries. Where data leaves the UK we rely on the UK–US data bridge (for certified providers) or the UK International Data Transfer Addendum or Agreement included in each provider's data processing terms.
Your rights
You can ask for a copy of your data, or ask us to correct it, delete it, restrict it, object to its use, or move it (portability). You can withdraw consent at any time. You have an absolute right to object to direct marketing. Email hello@testedtools.dev. We reply within one month.
Complaints
If you're unhappy with how we've handled your data, please email us first at hello@testedtools.dev with "Data complaint" in the subject. We'll acknowledge within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Children
TestedTools is aimed at professionals and isn't intended for under-18s.
Changes
We'll post any changes here with a new date. If a change is significant we'll email subscribers.