Privacy Policy

What we collect

• The details you type (your sector, goods family, rough import value or tonnage, country of origin and similar context). We use these solely to generate your report.
• Your email address, so we can deliver the finished report and send your receipt.
• Payment details are processed by Stripe. We never see or store your full card number, CVC or expiry. Stripe is a PCI-DSS Level 1 certified processor; your card data goes directly to Stripe. We receive only a confirmation that payment succeeded and a limited record (such as the last four digits and a transaction ID) for our records and refunds.

Lawful basis

Under the UK GDPR, we process your email and the details you submit to perform the contract for the report you buy. We rely on our legitimate interests for basic, non-identifying records needed for accounting and fraud prevention, and on legal obligation for records we must keep (for example, for tax).

Your inputs are used only to generate the report

The details you enter are used for one purpose: to produce your report. We do not sell them, publish them, share them with third parties, or use them to train models.

Analytics: cookieless, no personal data

We measure aggregate traffic with Fathom Analytics, a privacy-first, cookieless service. Fathom sets no cookies, collects no personal data, does no cross-site or cross-device tracking, and builds no advertising profiles. Because it collects no personal data and sets no cookies, it is compliant with the UK GDPR and PECR without a cookie-consent banner. We cannot use Fathom data to identify you.

We do not sell or share your personal information

We do not sell your personal information, and we do not share it for targeted advertising. We do not have, and will not create, any such data-sale program.

How we use your information

• To generate and deliver the report you ordered.
• To email you the report, a receipt, and any delivery follow-up.
• To process refunds and respond to support requests.
• To keep basic, non-identifying records required for accounting and fraud prevention.

We do not use your email for marketing newsletters unless you explicitly opt in.

Data retention

We keep your report inputs and email only as long as needed to deliver the report and provide support, and to meet legal, tax and accounting obligations. Payment records held by Stripe are retained under Stripe's own policies. You may ask us to delete your data at any time, subject to records we are legally required to keep.

Your rights under the UK GDPR

You have the right to access, rectify, erase, restrict or port your personal information, and to object to processing. To exercise any of these rights, email hello@ukcbamcheck.co.uk and we will respond within the timeframe required by the UK GDPR (usually one month). You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Children's privacy

This service is intended for adults and business users and is not directed to children. We do not knowingly collect personal information from children.

Data security

Data is transmitted over encrypted HTTPS connections. Payment card data is handled entirely by Stripe. No method of transmission or storage is perfectly secure, but we limit the personal data we hold precisely to reduce risk.

International transfers

Some of our processors (such as Stripe and Fathom) may process data outside the UK. Where personal data is transferred outside the UK, it is protected by appropriate safeguards recognised under the UK GDPR.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above.

Contact

Questions about this policy or your data? Email hello@ukcbamcheck.co.uk.

Terms of Service · Accessibility Statement