Privacy
This notice covers signing up for Glasstally updates on this website, and the posted letter. It says only what Glasstally does today. If you accept cookies, it also covers how we measure the use of this website and of the Glasstally app.
Who is responsible
Glasstally (Tastola), contact@tastola.com
What we collect when you sign up
- Your email address.
- Your company name, if a form asked for it and you gave it.
- Whether you ticked the box for Glasstally updates, and the time you did.
- Where you came from: the source, and the code printed on your letter if you came from one.
- The campaign tags (UTM) in the link you used, if there were any.
Our host, Vercel, also keeps the standard technical logs of requests to a website, such as IP address, time and page.
Why, and our legal basis
We use your details to send you Glasstally product updates, and only if you ticked the box. Our legal basis is your consent (GDPR Article 6(1)(a)). You can withdraw it at any time, and that doesn’t affect what we did before you withdrew.
How long we keep it
Until you unsubscribe or ask us to delete it.
Unsubscribe or delete
Every update email we send will carry an unsubscribe link. It turns your consent off and deletes your sign-up record.
You can also email glasstally@tastola.com and ask us to delete your details. We handle those requests.
Analytics and cookies
With your consent we use PostHog to see how the website and the app are used, so we can improve them. Nothing is sent to PostHog until you choose Accept. If you choose Reject, nothing is sent and the site works as before.
Session recordings run on our public pages only (home, pricing, letter and blog), and everything you type is hidden. On those pages we also record which buttons and links you click, with their text, and where on the page (the heatmaps we use to improve them), and how fast the pages load. Inside the signed-in app we count page visits and a few actions, and nothing else: no clicks, no heatmaps, no recordings and no text from the screen. None of this runs on a seller's hosted calculator.
If you accept, PostHog stores these in your browser. Each name carries our PostHog project id, shown here as …:
- ph_phc_…_posthog: a cookie, with a copy in local and session storage. A random id for your browser, and your Glasstally account id once you sign in. The cookie lasts 365 days.
- ph_phc_…_posthog_cpm: a cookie set by PostHog together with the one above. It lasts 365 days.
- __ph_opt_in_out_phc_… (local storage): remembers that you accepted.
- ph_phc_…_primary_window_exists, ph_phc_…_window_id and ph_phc_…_session_registered_properties (session storage): keep one visit together. They end when you close the tab.
- Whatever you choose, we store gt-cookie-consent in your local storage, to remember the choice itself.
Legal basis: your consent (Article 6(1)(a) GDPR, and the ePrivacy rules for cookies and similar storage). You can withdraw it at any time: choose Cookie settings, then Reject. We then stop sending data and remove what PostHog stored in your browser. Withdrawing doesn't affect what we collected before.
PostHog keeps analytics events for up to 1 year and session recordings for one month. After that they are deleted.
Change your choice under .
Who handles your data for us
- Vercel: hosting, and the request logs above.
- Neon: the database where your sign-up record is stored.
- PostHog Inc. (PostHog Cloud EU, Frankfurt): the analytics provider for product analytics and session replay, only if you accept cookies. Sees pages visited, clicks, device and browser, a random id, and your account id once signed in.
- Groq LLC (United States): when you upload a supplier price list, an AI model run by Groq reads it so we can turn it into prices for you to check. Groq acts as our processor under its Data Processing Addendum and does not use your files to train models. It keeps request logs for up to 30 days, only to fix faults or investigate abuse. Your files are processed in the United States and in other countries where Groq operates. Transfers from the UK and the EEA rely on the EU Standard Contractual Clauses and the UK addendum. Groq Data Processing Addendum, Groq sub-processors.
Got our letter?
We took your business name and postal address from Companies House and your own website. We used them once, to post you a letter, because we think a price calculator could help a blind business like yours. Our legal basis is legitimate interests (UK GDPR Article 6(1)(f)).
If we wrote to you, we keep only your public business contact details, and delete them 90 days after our last letter unless you sign up. If you object or ask us to delete them, we do so straight away. If you sign up, the rules above for updates apply.
We won’t write to you again unless you opt in on our page. To see, correct or delete what we hold, or to object, write to glasstally@tastola.com. You can complain to the Information Commissioner’s Office (ico.org.uk).
Your rights
You can ask to see what we hold about you, to correct it, or to delete it. You can withdraw your consent, and you can object to our use of your details. Write to glasstally@tastola.com.
You can also complain to a supervisory authority. In Austria that is the Datenschutzbehörde (dsb.gv.at).