Privacy policy

Last updated 13 October 2026

Who we are

GetYourLLM (“we”, “us”, “our”) publishes research and comparisons about business software at getyourllm.com. We are the controller responsible for the limited personal data described in this policy.

For any privacy question, request or complaint, contact us at [email protected]. We aim to respond within 30 days.

The short version

This site is deliberately minimal. There are no accounts, no sign-ups, no comment system and no contact form. We run no analytics and no advertising. The site loads no third-party scripts, fonts, images or frames, and it sets no cookies of its own. We do not sell personal data, and we have no interest in doing so. The only time personal data is involved is (a) routine server logs kept by our hosting provider, and (b) cookies set by a vendor if you click one of our affiliate links and visit their site.

What we collect

Server logs. This site is hosted on Cloudflare Pages. Like every web host, Cloudflare processes standard request data in order to deliver pages and protect the site from abuse: your IP address, the browser or user agent you are using, the page requested, the referring page, and a timestamp. We do not build profiles from this data and we do not combine it with anything else.

Emails you send us. If you email [email protected] — to report a pricing error, for example — we receive your email address and whatever you write. We use it only to reply and to correct our content.

Nothing else. That is the complete list.

What we deliberately do not collect

So that there is no ambiguity, we do not:

ask you to create an account, register or log in;
run analytics, heatmaps, session recording or A/B testing tools;
run advertising, retargeting or social media pixels;
load third-party JavaScript, web fonts, embedded videos or external images;
operate a contact form, newsletter sign-up or comment system;
set cookies of our own on your device;
sell, rent or trade personal data, or share it for cross-context behavioural advertising;
know who you are unless you choose to email us.

If we ever add any of the above, we will name the provider, say what it collects, and put a consent mechanism in place where the law requires one — and we will update this page before the change goes live.

Cookies

This site sets no cookies of its own. There is no cookie banner because there is nothing to consent to: we do not place analytics, advertising or preference cookies.

One qualification. Our CDN provider, Cloudflare, may set a strictly necessary security cookie for bot detection and DDoS protection. That cookie exists to keep the site online, is not used to profile you or to build an advertising audience, and is not accessible to us as a marketing signal.

Affiliate links and how tracking works

This site is funded by affiliate commissions, and this is the one place where tracking is genuinely involved — so it is worth being precise about it.

When you click an affiliate link on this site, you are taken to the vendor’s website. At that point the vendor, or the affiliate network they use, may set a cookie on your device. That cookie records that our site referred you, so that a commission can be attributed to us if you later subscribe. Those cookies are set and controlled by the vendor or its network, not by us, they live on their domain, and they are governed by their privacy policy and cookie notice.

What we receive back is not personal data. Affiliate dashboards report in aggregate form — for example “one subscription was attributed to this link on this date”. We never receive your name, email address, company, payment details, order value or browsing history from a vendor. We cannot identify you from a referral.

How to avoid it. Block or delete cookies in your browser settings, or use a private window. Affiliate links will still take you to the correct vendor; we simply will not be credited for the referral. Nothing about the product, the price or your experience changes either way.

Legal bases for processing (GDPR / UK GDPR)

Where the EU or UK GDPR applies, we rely on the following legal bases:

Legitimate interests (Article 6(1)(f)) for processing server log data, in order to serve the site securely and prevent abuse. We have weighed our interest in keeping the site available and secure against your rights, and the processing is limited to routine technical data.
Legitimate interests (Article 6(1)(f)) where you email us. Reading your message and replying to it — or correcting a published figure because you told us it is wrong — is a legitimate interest that does not override your rights, particularly given that you initiated the contact.
Consent (Article 6(1)(a)) where consent is the applicable basis — for example, any future non-essential cookie would be set only after you agree, and you could withdraw at any time. No such cookies are currently used.

International transfers

Our hosting and CDN provider, Cloudflare, is based in the United States and operates a global network, so request data may be processed outside your country. Cloudflare maintains appropriate safeguards for such transfers, including Standard Contractual Clauses and, where relevant, an adequacy mechanism. We do not transfer personal data to any other country for our own purposes.

Who we share data with

We share nothing for marketing purposes. The only recipients are:

Cloudflare — our hosting and CDN provider, acting as our processor, for the server log data described above.
Affiliate networks and vendors — only in the referral-attribution sense described above. They do not receive personal data from us; they set their own cookie on their own domain.
Legal authorities, if we are legally compelled to disclose information. We would disclose only what is strictly required.

We do not sell personal data. We do not share it for cross-context behavioural advertising.

How long we keep data

Server logs. We do not operate a log store of our own and we keep no separate copy of request data. Retention is set by our hosting provider, Cloudflare, and is described in Cloudflare’s own privacy documentation. In practice we have nothing independent to retain or to delete.
Emails you send us are kept for as long as needed to resolve your enquiry and to evidence any correction we make to our content, then deleted.
We hold no other personal data, so there is nothing else to retain.

Security

The site is served entirely over HTTPS. It is a static site: there is no database, no server-side application, no user accounts and no stored credentials, which removes most of the categories of risk that typically lead to a data breach. Access to our hosting account and email is protected by strong authentication.

Your rights

Depending on where you live, you may have some or all of the following rights in relation to your personal data:

Access — to be told what we hold about you and to receive a copy;
Rectification — to have inaccurate data corrected;
Erasure — to have your data deleted;
Restriction — to limit how we use your data;
Objection — to object to processing based on legitimate interests;
Portability — to receive data you gave us in a machine-readable format;
Withdraw consent — at any time, where processing is based on consent.

In practice the only personal data we are likely to hold about you is an email you sent us. To exercise any right, email [email protected]. We will respond within the period your local law requires and will not charge you for a reasonable request.

Complaining to a regulator

If you are in the EEA, the UK or Switzerland and you believe we have handled your data improperly, you have the right to lodge a complaint with your national data protection authority. We would ask that you contact us first so we have the chance to put it right.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising those rights.

We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding twelve months. The categories we may hold are limited to identifiers (an email address, if you write to us) and internet or network activity (routine server logs held by our hosting provider). You can exercise any right by emailing [email protected].

Third-party websites

This site links to vendor and third-party websites. Once you follow a link, you are on someone else’s site and their privacy policy applies, not ours. We are not responsible for how they handle your data. We would encourage you to read the privacy policy of any vendor you are considering buying from, particularly where affiliate cookies are involved.

Children

This site is aimed at business buyers and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

If we change this policy materially — for example by adding analytics or an email list — we will update the date at the top of this page and, where the change affects your rights, describe what changed. The current version is always the one published here.

Contact

Privacy questions, data requests and complaints: [email protected].