Privacy policy
The short version: we collect the minimum needed to deliver your report, we never sell data, and marketing is strictly opt-in. The detail is below, in plain English. Draft pending solicitor review.
1. What we collect, and why
For the free check: the postcode you enter and, optionally, your project description and email. The postcode is needed to run the check (legitimate interest); your email is used to show you the full results and send you the link (performance of the service you requested).
For paid reports: additionally your payment (handled entirely by Stripe) and the generated report itself.
For abuse prevention: a one-way hash of your IP address for rate limiting. We do not store raw IP addresses against your activity.
2. Marketing is opt-in, full stop
We only send marketing or area-update emails if you tick the box that asks. Consent is recorded, never assumed, and every email has an unsubscribe link that works.
3. Who processes data for us
| Processor | Purpose | Location / safeguards |
|---|---|---|
| Vercel | Hosting and delivery | EU/US (standard contractual clauses) |
| Supabase | Database (reports, emails, audit logs) | EU (London region) |
| Stripe | Payments — we never see your card details | EU/US (SCCs) |
| Anthropic | AI processing of your project description | US (SCCs); not used to train models |
4. How long we keep things
Reports and purchase records: 6 years (tax and liability). Free-check emails that never purchase: up to 24 months, then deleted. Funnel analytics: aggregated; event-level data pruned within 12 months.
5. Your rights
UK GDPR gives you access, rectification, erasure, restriction, portability and objection. Email hello@planningpolicy.co.uk and we will act within a month. You can complain to the ICO (ico.org.uk) at any time — though we would rather fix it first.
6. What we never do
Sell your data. Share your email with anyone for their marketing. Use your project description for anything except generating your results. Profile you beyond the aggregate statistics that tell us which areas and project types people care about.
Draft v1, June 2026 — pending solicitor review. Data controller: Planning Policy · hello@planningpolicy.co.uk