From 8fe3461adf8d764d72d1a8335ef2f25fa2c389a3 Mon Sep 17 00:00:00 2001 From: Ovidiu U Date: Wed, 10 Jun 2026 13:15:43 +0100 Subject: [PATCH] Update legal pages with ICO registration, query logging, push notifications, and automated recommendations disclosure - Add ICO registration reference (00014395133) to privacy policy, terms of service, and refund policy - Document search/query logging (hashed IP, location, fuel type, result count) with 24-month retention under legitimate interests - Add push notification data section (OneSignal endpoints, encryption keys, preferences) to privacy policy - Add new section on automated recommendations explaining fill-up timing algorithm is informational only without legal effects - Clarify IP address collection context: security/abuse/fraud only, not individual profiling - Update retention periods: security logs 12 months, query logs 24 months, push subscriptions until unsubscribe - Expand data processor descriptions (OneSignal push data, Umami cookieless commitment) - Add commercial use restrictions to terms: no scraping, mirroring, or republishing compiled data/rankings without permission - Clarify downstream data aggregator role and upstream data feed limitations - Add prohibition on using service while operating motor vehicle - Remove annual billing references (monthly only) - Add VAT status notice and downgrade-to-free-tier behavior on cancellation - Add data controller contact details to privacy policy footer --- resources/views/legal/privacy.blade.php | 89 ++++++++++++++++++------- resources/views/legal/refund.blade.php | 2 +- resources/views/legal/terms.blade.php | 68 +++++++++++++------ 3 files changed, 113 insertions(+), 46 deletions(-) diff --git a/resources/views/legal/privacy.blade.php b/resources/views/legal/privacy.blade.php index 5ff6157..e0b707d 100644 --- a/resources/views/legal/privacy.blade.php +++ b/resources/views/legal/privacy.blade.php @@ -13,8 +13,8 @@ is the data controller for personal data collected through this service.

- As the data controller, Ovidiu Ungureanu is registering with the UK Information - Commissioner's Office (ICO). Our registration number will be published here once issued. + Ovidiu Ungureanu is registered with the UK Information Commissioner's Office (ICO) as a + data controller. ICO registration reference: 00014395133.

If you have any questions about this policy or how we handle your personal data, contact us at @@ -31,8 +31,8 @@

Contact data for alerts

If you opt in to WhatsApp or SMS alerts, your mobile phone number. We collect it only to - send the alerts you have requested, and only after you confirm the number through an - opt-in step. + send the alerts you have requested, and only after you verify the number through a + one-time passcode (OTP) sent to that number.

Location data

@@ -64,6 +64,15 @@ +

Search and query logs

+

+ When you search for stations or prices, we log the approximate search location, fuel + type selected, result count, timestamp, a one-way hashed IP address, and basic device + information (browser type, device type). We use these logs for abuse prevention, + troubleshooting, and aggregate service statistics. We do not use them to build a profile + of your individual behaviour. Logs are retained for a maximum of 24 months. +

+

Payment data

Payment card details are collected and processed by Stripe, our payment @@ -72,16 +81,25 @@ renewal date).

+

Push notification data

+

+ If you opt in to push notifications via OneSignal, we store your push subscription + endpoint (a browser-specific URL), the encryption keys needed for secure message + delivery, and your notification preferences. This data is retained until you unsubscribe, + revoke browser permission, or your subscription becomes stale. +

+

Usage data

- Features you use, queries you make, and alerts you configure — used to deliver the - service and improve it. + Features you use and alerts you configure — used to deliver the service and improve it.

Technical data

- IP address, browser type and version, device type, and operating system — used for - security, fraud prevention, and basic analytics. + IP address, browser type and version, device type, and operating system. IP address is + collected alongside account actions and searches for security, abuse prevention, and + fraud detection (lawful basis: legitimate interests, Art. 6(1)(f)). We do not use IP + addresses to identify you as an individual in any other context.

Marketing preferences

@@ -97,7 +115,8 @@
  • Finding stations near you on request (device location) — consent (Art. 6(1)(a)), given through your browser's location permission and withdrawable at any time.
  • Storing your saved location as a registered user — contract (Art. 6(1)(b)).
  • Payment processing — contract (Art. 6(1)(b)).
    • -
  • Security and fraud prevention — legitimate interests (Art. 6(1)(f)).
    • +
  • Security, abuse prevention, and fraud detection (including IP address logging) — legitimate interests (Art. 6(1)(f)).
    • +
  • Search and query logging for aggregate statistics and troubleshooting — legitimate interests (Art. 6(1)(f)).
  • Aggregated, non-identifying analytics and product improvement — legitimate interests (Art. 6(1)(f)).
  • Marketing emails — consent (Art. 6(1)(a)). You can withdraw consent at any time.
    • @@ -118,7 +137,19 @@
    -

    5. Who we share data with

    +

    5. Automated recommendations

    +

    + FuelAlert generates fill-up timing recommendations (for example, "fill up now" or "wait") + using an algorithm that analyses local price trends, historical patterns, and market + signals. These recommendations are informational only and are produced + automatically without human review. They do not have legal or similarly significant + effects on you, and we do not use them to make decisions that affect your rights or + interests in any material way. +

    +
    + +
    +

    6. Who we share data with

    We use the following processors to deliver the service. We do not sell your data to anyone.

    -

    6. International transfers

    +

    7. International transfers

    Some of our processors — including Stripe, Vonage and OneSignal — operate outside the UK and EEA, including in the United States. Where personal data is transferred @@ -150,18 +183,22 @@

    -

    7. How long we keep data

    +

    8. How long we keep data

    -

    8. Your rights under UK GDPR

    +

    9. Your rights under UK GDPR

    You have the following rights in relation to your personal data:

    @@ -181,7 +218,7 @@

    -

    9. Cookies

    +

    10. Cookies

    We use only a small number of essential cookies to operate the service, and self-hosted, cookieless analytics. Full details are in our @@ -190,7 +227,7 @@

    -

    10. Security

    +

    11. Security

    All traffic between your device and our service is encrypted with HTTPS. Passwords are stored as one-way hashes — we never see your plaintext password. Sensitive fields in @@ -201,7 +238,7 @@

    -

    11. Children

    +

    12. Children

    FuelAlert is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will @@ -210,7 +247,7 @@

    -

    12. Complaints

    +

    13. Complaints

    We hope you'll contact us first if you have a complaint, so we can try to put it right. You also have the right to lodge a complaint with the UK Information Commissioner's Office @@ -223,7 +260,7 @@

    -

    13. Changes to this policy

    +

    14. Changes to this policy

    We may update this policy from time to time. If we make material changes we will notify registered users by email. Non-material changes will be shown by an updated "Last updated" @@ -232,10 +269,14 @@

    -

    14. Contact

    +

    15. Contact

    - For any privacy queries, email + For any privacy or data protection queries, email hello@fuel-alert.co.uk.

    +

    + Data controller: Ovidiu Ungureanu trading as FuelAlert, Peterborough, United Kingdom. + ICO registration reference: 00014395133. +

    \ No newline at end of file diff --git a/resources/views/legal/refund.blade.php b/resources/views/legal/refund.blade.php index e49baa1..472e0fb 100644 --- a/resources/views/legal/refund.blade.php +++ b/resources/views/legal/refund.blade.php @@ -1,7 +1,7 @@ {{-- DRAFT: Generated {{ date('Y-m-d') }}. Review by UK-qualified solicitor recommended before launch. --}} diff --git a/resources/views/legal/terms.blade.php b/resources/views/legal/terms.blade.php index e419992..149d95c 100644 --- a/resources/views/legal/terms.blade.php +++ b/resources/views/legal/terms.blade.php @@ -1,9 +1,9 @@ {{-- DRAFT: Generated {{ date('Y-m-d') }}. Review by UK-qualified solicitor recommended before launch. --}} + title="Terms of Service" + heading="Terms of Service" + lastUpdated="{{ now()->format('j F Y') }}" + metaDescription="The terms that govern your use of FuelAlert's subscription service.">

    1. About these terms

    @@ -11,6 +11,7 @@ FuelAlert is a trading name of Ovidiu Ungureanu, a sole trader based in Peterborough, United Kingdom ("we", "us", "our"). These terms form a legally binding contract between you and Ovidiu Ungureanu trading as FuelAlert. + ICO registration reference: 00014395133.

    By creating an account or using the service, you confirm that you have read, understood @@ -22,8 +23,12 @@

    2. The service

    - FuelAlert provides UK fuel price comparison and forecasting. We aggregate publicly - available UK fuel price data and surface it through a web app, alerts and forecasts. + FuelAlert provides UK fuel price comparison and fill-up timing recommendations. We act + as a downstream consumer of publicly available UK government fuel price data feeds + (including the UK Fuel Finder / Pump Watch transparency scheme) and surface that data + through a web app, alerts, and forecasts. We do not control the prices submitted by fuel + retailers to those upstream schemes and are not responsible for errors or delays in + that data.

    We offer a free tier and one or more paid subscription plans. The current list of plans @@ -49,8 +54,8 @@

    4. Subscriptions, billing and payment

    - Paid plans are billed in advance, either monthly or annually. The current price for each - plan is shown on the pricing page at the time you subscribe. + Paid plans are billed monthly in advance. The current price for each plan is shown on + the pricing page at the time you subscribe.

    Auto-renewal. Subscriptions renew automatically at the end of each @@ -71,7 +76,13 @@

    VAT. FuelAlert is currently below the UK VAT registration threshold and is not VAT-registered, so no VAT is charged on your subscription. The price shown is the total - amount you pay. + amount you pay. If our VAT status changes, we will update these terms and notify you before + any price change takes effect. +

    +

    + Downgrade on cancellation. When a paid subscription ends or is cancelled, + your account reverts to the free tier. Paid alert channels (WhatsApp, SMS) are deactivated, + but your alert settings are retained and will reactivate if you resubscribe.

    @@ -94,11 +105,14 @@

    6. Acceptable use

    You agree not to:

      -
    • Scrape, reverse-engineer, or bulk-extract data from the service.
      • +
    • Scrape, reverse-engineer, or bulk-extract data from the service without our written permission.
      • +
    • Mirror, republish, or systematically reproduce our compiled price data, station rankings, scoring outputs, or any other value-added data derived from the service.
      • +
    • Use the service or its outputs for commercial exploitation, resale, or competitor monitoring without our written consent.
    • Resell or redistribute fuel price data taken from FuelAlert.
    • Use the service for any unlawful purpose.
    • Attempt to circumvent or compromise our security measures.
    • Use automated tools to make queries beyond what a single human user would reasonably make.
      • +
    • Use the service while operating a motor vehicle. You must not interact with the service while a vehicle is in motion. Compliance with the Road Traffic Act 1988, the Highway Code, and all applicable road traffic laws is your sole responsibility.
    @@ -107,12 +121,14 @@

    Fuel prices shown on FuelAlert are sourced from official UK government data feeds (including the Pump Watch / Fuel Finder transparency schemes) and refreshed - periodically. Stations can change prices at any time, and there is usually a delay - between a forecourt change and the feed update. + periodically. FuelAlert acts as a downstream consumer of those feeds and does not + control the data submitted by fuel retailers to the central aggregator. Stations can + change prices at any time, and there is usually a delay between a forecourt change + and the feed update.

    We make reasonable efforts to display accurate prices but we cannot guarantee - that the price shown will match the price at the pump when you arrive. + that the price shown will match the price at the pump when you arrive. Always confirm the price at the pump before fuelling.

    @@ -123,21 +139,22 @@

    -

    8. Forecasts and predictions

    +

    8. Forecasts and recommendations

    FuelAlert may show forecasts and recommendations (e.g. "fill up now" or "wait"). These - are informational only, are not financial advice, and should not be - relied upon as a guarantee of future prices. Past trends do not guarantee future prices. - We do not warrant the accuracy of any forecast. + are generated algorithmically based on local price trends, historical patterns, and + market signals. They are informational only, are not financial advice, + and should not be relied upon as a guarantee of future prices. Past trends do not + guarantee future prices. We do not warrant the accuracy of any forecast or recommendation.

    9. Intellectual property

    - The FuelAlert name, logo, software, and original content are owned by Ovidiu Ungureanu. - You receive a limited, non-exclusive, revocable licence to use the service for personal, - non-commercial purposes. + The FuelAlert name, logo, software, scoring algorithms, and original content are owned + by Ovidiu Ungureanu. You receive a limited, non-exclusive, revocable licence to use the + service for personal, non-commercial purposes.

    Underlying fuel price data is owned by the respective fuel retailers and published under @@ -176,6 +193,11 @@ including but not limited to outages or errors at our payment processor, hosting provider, or upstream data sources. +

  • + We are not responsible for the accuracy, completeness, or timeliness of data + submitted by fuel retailers to the UK Fuel Finder scheme or any other upstream + source we consume as a downstream aggregator. +
    • @@ -218,5 +240,9 @@ For questions about these terms, email hello@fuel-alert.co.uk.

    +

    + Ovidiu Ungureanu trading as FuelAlert, Peterborough, United Kingdom. + ICO registration reference: 00014395133. +

    -     +     \ No newline at end of file