Skip to content

Amazon and Scan buttons are ordinary merchant searches. Commission tracking is not live on this version. Price is never shown here.

bayplan.co.uk

Privacy

Effective 25 August 2026. Last updated 25 August 2026.

This notice describes how bayplan.co.uk handles information. It is written for UK GDPR. It is not legal advice.

Who is the controller

The controller is Luke Tinmurth, an individual trading as Bayplan, operator of bayplan.co.uk.

Postal address: Oakland Road, Newton Abbot, TQ12 4EF
Email: privacy@bayplan.co.uk

What this site does not do

  • No user accounts, login, or email list.
  • No analytics pixels, advertising tags, or social tracking pixels.
  • No cookie banner, because we set no cookies of our own.
  • No non-essential browser storage. Plans are not saved in local storage. The URL is the plan.
  • No live price feed that would require storing your search.

What this site loads

  • Pages, styles, scripts and fonts are hosted with the site. We do not load Google Fonts.
  • The planner runs in your browser. Numbers you type stay in the page and, if you calculate, in the address bar so you can bookmark or share the result.
  • The only browser storage the app may touch is a technical sessionStorage guard used by the router to recover from a failed client navigation. It is not a saved plan, and we do not read it to identify you.

Hosting logs

The site is hosted on Cloudflare Pages. Cloudflare, Inc. processes technical request data as a processor in order to deliver the page, absorb abuse and keep the service available. That can include IP address, date and time, requested URL, referrer and browser type. We do not use those logs to build a profile of you, and we do not combine them with planner inputs.

We do not enable Logpush, Workers observability, or any Bayplan log store. On the current Free plan, Cloudflare documents that Security Analytics can retain request data for up to seven days. Workers observability logs, if they were enabled, would be retained for three days; they are not enabled here. We do not export Cloudflare logs into a Bayplan database. Some edge processing may take place outside the UK. Cloudflare publishes a customer DPA and transfer mechanisms at cloudflare.com/cloudflare-customer-dpa.

Lawful basis for serving the site and handling those logs: legitimate interests in operating a public website and keeping it secure. The planner inputs are not sent to us as a stored record.

Retention

We do not keep a Bayplan database of visitors or plans. Hosting logs follow Cloudflare’s documented retention for the Free-plan features actually in use (Security Analytics up to seven days; Workers observability not enabled). We do not extend that retention. Shared plan URLs exist only where you keep them (bookmark, message, history).

When you click a merchant

Amazon UK and Scan are third parties. Their pages set their own cookies and apply their own privacy notices. On this version the links do not carry an Associates or Awin identifier, so we do not receive commission from the click. When that changes, the affiliate disclosure will say so first.

Your rights

Under UK GDPR you may ask for access, correction, erasure, restriction, objection, or portability where those rights apply, and you may complain to the Information Commissioner’s Office at ico.org.uk. Because we do not hold an account or stored plan about you, many of those requests will have nothing to retrieve. Hosting logs, if they still exist, are in Cloudflare’s systems.

To exercise a right, email privacy@bayplan.co.uk.

Children

The site is a household NAS planner. It is not aimed at children and it does not knowingly collect information about children.

Notices

Font licences and a note on product photographs are at /notices and in THIRD_PARTY_NOTICES.txt.

Changes

If we add analytics, accounts, affiliate tracking, or any non-essential storage, this notice will change before that goes live — and a cookie banner will be required for non-essential storage.