Privacy Policy
Effective and last updated: September 9, 2026
How RallyBids collects, uses, shares and retains information when you browse our directory or contact us.
1. Who we are and what this policy covers
RallyBids ("we", "us" or "our") operates rallybids.com, a directory for discovering useful products and submitting products for review. RallyBids is responsible for deciding how the personal information described in this policy is used. For privacy questions or requests, use our contact form.
This policy covers visiting our website, submitting the contact form, suggesting a product and corresponding with us. It does not cover websites you reach through directory links or a provider's services you use independently. No account registration or online payment is currently offered.
2. Information we collect
Swipe the table to see all columns →
| Source | Information | Why it is needed |
|---|---|---|
| Contact form | Your name, email address, topic and message; any product website or other details you choose to include. | To understand and respond to your request, review a submission or correct a listing. |
| Submission processing | A random submission reference, timestamps, a daily IP-derived hash, notification status and email provider message reference. | To save messages, avoid duplicate submissions, limit abuse and investigate email delivery problems. |
| Direct email | Your sender address, message, attachments you send and the correspondence history. | To communicate with you and keep context for an ongoing request. |
| Website delivery | Our hosting and security provider receives connection and request information, which may include IP address, requested URL, browser information, timestamps and security events. | To deliver and protect the website, diagnose failures and handle abusive traffic. |
Form fields are required where marked by the form. You can browse the directory without submitting your contact details. If you do not provide a reply address or enough information about a request, we may be unable to answer it.
The contact database stores a hash derived from your IP address and the current day, not the raw IP address. The hash remains linked to its submission and is not anonymous information. Hosting and email providers may process raw IP addresses and other technical information separately.
Search terms and category choices are processed in your browser. We do not send directory searches to a search or analytics service. Please do not send passwords, card details, identity documents or unnecessary sensitive personal information. The contact form does not accept file uploads.
3. How and why we use information
- Deliver the website and allow you to browse its directory.
- Receive, save and respond to enquiries, product submissions, corrections and privacy requests.
- Review product information for possible publication in the directory.
- Prevent repeated submissions, spam and misuse, and investigate service or delivery errors.
- Meet applicable legal obligations and establish, exercise or defend legal claims when necessary.
Where a data protection law requires a lawful basis, we rely on our legitimate interests in operating a useful, secure directory and handling correspondence, subject to your rights and interests. Processing needed for steps you ask us to take before an agreement, or to perform an agreement, may instead be based on that request or agreement. Legal obligations apply where a law requires particular processing. If we ask for consent for a specific optional use, you can withdraw it for future processing.
Sending us a message does not subscribe you to marketing. We do not currently operate a newsletter, use contact submissions for targeted advertising, sell personal information or share it for cross-context behavioural advertising. We do not use automated decisions producing legal or similarly significant effects. Automatic submission limits help protect the form; please try the contact form again later if a submission limit prevents a request.
4. Product submissions and public listings
The current directory contains unpaid editorial picks. Public product names, descriptions and websites may come from their official websites or from information their representatives submit to us. We use those details to describe and link to products.
If you request a listing, the product information intended for that listing may be published after review. We do not publish your private correspondence or contact email as part of a listing unless you specifically ask us to make it public. Public listings may be indexed or copied by search engines and other visitors. Removing a listing from RallyBids does not automatically remove copies held elsewhere.
6. Where information is processed
Our website infrastructure providers and Google operate internationally. Information may be processed in the United States and other countries where these providers or their service partners operate, which may have different privacy laws from your country. We do not promise that information stays in your country.
Where applicable law requires safeguards for an international transfer, appropriate transfer arrangements are required. Provider privacy notices explain their international processing and available transfer frameworks. You can contact us for information about safeguards relevant to your request.
7. How long we keep information
- Contact database: submissions, their daily IP-derived hashes and notification records are scheduled for deletion after 180 days from submission. A periodic cleanup performs this deletion, so removal is not necessarily at the exact expiry second.
- Email correspondence: inbox copies are separate from the contact database and are not deleted by its 180-day cleanup. We retain correspondence while it is needed to answer a request, manage an ongoing conversation, resolve a dispute or comply with an applicable obligation. We consider the request's status and any relevant legal period when reviewing continued retention.
- Published listings: product information remains while the listing is maintained. Contact us to request a correction or removal.
- Provider logs and backups: service providers may retain operational logs or backup copies under their own service schedules. Deletion from the active contact database does not mean every provider backup is erased immediately.
You may request earlier deletion. We will explain any information we need to retain and the reason, where applicable.
8. How we protect information
We use HTTPS, server-side input validation, submission limits and restricted access to the services holding contact information. Contact submissions are saved before an email notification is attempted so that an email outage does not by itself lose the message.
No online service or email channel can guarantee absolute security. Keep your submission reference private, check that you are on rallybids.com before submitting, and contact us if you suspect misuse of your information.
9. Your choices and privacy rights
Depending on the law that applies to you and the basis for processing, you may have rights to access your personal information; correct inaccurate information; request deletion or restriction; object to processing, including processing based on legitimate interests; receive certain information in a portable format; or withdraw consent where processing relies on it. Withdrawal does not affect earlier lawful processing.
Select "Privacy request" on the contact form. Describe your request and, if available, include the submission reference. We may ask for proportionate verification to protect your information; do not send an identity document unless specifically requested through an appropriate channel.
We will handle requests within the period required by applicable law and explain any permitted extension or reason we cannot fulfil a request. You may also complain to the data protection authority where you live or where the relevant processing occurs. If UK data protection law applies, you can contact the Information Commissioner's Office. We will not penalise you for exercising a right available to you.
11. Children
RallyBids is intended for developers, makers and people exploring products, and is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has submitted personal information, contact us so we can review and remove it where appropriate.
12. Changes and contact
We may update this policy when the website, its providers or our information practices change. The effective date above identifies this version. Where required, we will give additional notice of a material change or obtain consent before a new use.
Privacy contact: RallyBids
Send a privacy request