Privacy Statement

1. Introduction

We respect your privacy and are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025. This privacy statement explains how we collect, process, and protect your information when you visit our registry, use our search directory, or enroll in our subscription programs.

2. Data We Collect

Depending on your interaction with the directory, we collect the following categories of information:

• Registry & Search Queries: Company registration numbers searched on our portal.
• Lead Generation & Audit Records: Publicly available corporate data, including company names, addresses, sector classifications, and corporate contact details sourced from Companies House.
• Customer Accounts: Names, emails, company numbers, and billing data processed securely via Stripe.
• Case Logs: Information submitted by the public to log data protection complaints.

3. Legal Basis for Processing

Under the UK GDPR, we process your personal data based on:
Legitimate Interests: Running a public data protection complaints directory and compiling corporate risk reports for underwriting syndicates.
Legal Obligation: Processing statutory complaint details and managing suppression requests.
Contractual Necessity: Delivering services to our paying registered subscribers.

4. Data Sharing & Licensing

We compile passive data protection compliance scores (e.g., missing portals, missing policies) and license this aggregated risk feed to B2B credit ratings agencies and Directors & Officers (D&O) liability insurers. We do not sell personal data to marketing lists.

5. Your Rights & Suppressions

You have the right to inspect, correct, or request the deletion of your corporate record from our public registry. You may opt out of cold outreach campaigns or register email suppression requests instantly on our Opt-out Preferences page.