Privacy Notice

Controller: [COMPANY NAME] Ltd, [registered office address]. ICO registration: [pending]. Contact: support@directorscreen.co.uk.

What we collect

Search data: the postcode you enter, and the report generated from it (a postcode alone is not usually personal data; combined with your order it may be). Order data: order id, amount, timestamp, Stripe session and payment-intent identifiers, and the email address you give Stripe. Technical data: server logs (IP address, user agent) kept for security. We set no advertising or analytics cookies at present; if we add analytics we will ask for consent first.

Why (lawful basis)

Performing our contract with you (UK GDPR art. 6(1)(b)) to generate and deliver the report; legitimate interests (art. 6(1)(f)) in fraud prevention and service security; legal obligation (art. 6(1)(c)) for tax and accounting records.

Sharing

Stripe (payments, receipts) — see stripe.com/privacy. Our hosting and database providers (processing only, under contract). Public data providers receive only the postcode/coordinates needed to run the query. We do not sell personal data.

Retention

Order and report records: 6 years (HMRC). Server logs: 30 days. Unpaid abandoned orders: 30 days.

Your rights

Access, rectification, erasure (subject to our legal retention duties), restriction, portability and objection. Email support@directorscreen.co.uk. You can complain to the Information Commissioner's Office (ico.org.uk).

International transfers

Our providers may process data outside the UK under UK-approved safeguards (IDTA / UK Addendum to SCCs).