Privacy Policy
Last updated: 20 June 2026
This policy explains what personal data ScotFuel collects, why, and what rights you have over it. ScotFuel is a heating oil price comparison and group-buying platform for Scotland.
Who we are. ScotFuel is operated by [Legal entity name to be confirmed], [registered address to be confirmed]. We are the "data controller" for the personal data described in this policy.
What we collect
We collect personal data when you use the site, including:
- Name, email address and phone number - when you sign up, join a group, start a group, place an order, or contact us
- Postcode and delivery address (house, street, town) - to find suppliers and groups near you, and to fulfil orders
- Password - stored as a one-way cryptographic hash. We cannot see or recover your actual password
- Payment information - we never see or store your card details. Payments are handled entirely by Stripe, our payment processor
- Technical data - such as IP address and browser type, collected automatically by our hosting provider for security and performance
Why we collect it
| Purpose | Legal basis |
|---|
| Providing price comparisons and group order coordination | Performance of a contract with you |
| Processing your £1.99/month membership payment | Performance of a contract with you |
| Sending service emails (welcome, password reset, group confirmations) | Performance of a contract with you |
| Notifying you when a group starts near a postcode you asked about | Your consent |
| Passing your details to a supplier to fulfil an order you've placed | Performance of a contract with you |
| Preventing fraud (e.g. duplicate addresses gaming group discounts) | Our legitimate interest in running the service fairly |
Who we share it with
We share data with the following third parties, only as needed to run the service:
- Stripe - processes membership payments. Stripe's own privacy policy applies to data they hold
- Supabase - hosts our database (groups, members, account data)
- Resend - sends transactional emails on our behalf (welcome, password reset, group confirmations)
- Netlify - hosts the website and processes form submissions
- postcodes.io - a free public UK postcode lookup service. We only send the postcode itself, never your name or contact details
- Heating oil suppliers - when you place an individual order or join/start a group order, we share your name, contact details and delivery address with the relevant supplier so they can fulfil it
We never sell your personal data to anyone.
How long we keep it
- Group order data - automatically deleted 14 days after a group's closing date. This happens without anyone needing to request it
- Membership account data - kept while your membership is active, and for a reasonable period afterwards in case you return. You can ask us to delete it sooner at any time
- Password reset tokens - expire after 1 hour and are not reused
Your rights
Under UK data protection law, you have the right to:
- Ask what personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data
- Object to or restrict certain uses of your data
- Receive your data in a portable format
- Complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data
To exercise any of these rights, contact us via the contact form on scotfuel.com.
Cookies and local storage
ScotFuel does not use tracking cookies. We use your browser's local storage to keep you signed in between visits (storing your email, name and current group ID on your own device). This data never leaves your device except when needed to verify your session with our servers.
Children
ScotFuel is intended for adults arranging heating oil for their household. It is not intended for use by anyone under 18.
Changes to this policy
We may update this policy from time to time. Significant changes will be noted on this page with an updated date at the top.
Contact us
Questions about this policy or your data can be sent via the contact form on scotfuel.com.