Privacy notice

The short version

We hold as little as will do the job, we encrypt the sensitive parts, we never sell it, and we delete it on a schedule. This site sets no advertising cookies and runs no third-party tracking.

What we collect

If you request a free assessment: the link, the name as it appears in it, your email address, optionally your telephone number, and whatever background you choose to give us.

If you open a case: the above, plus your postal country for tax purposes, your payment reference, and the record of your signature on the engagement letter — the name you typed, the time, and the IP address it came from. Card details never reach our servers; they go directly to Stripe.

Automatically: server logs, retained for 30 days.

Why, and on what basis

To assess and pursue your removal, which is performance of our contract with you. To answer an assessment request, which is our legitimate interest in responding to an enquiry. To meet accounting and anti-money-laundering obligations, which is a legal obligation.

We do not use your data for marketing, and there is no marketing to opt out of.

Who else sees it

Our processors: Stripe for payment, Resend for email, Amazon Web Services for storage, and a search-results provider for verification. Each is bound by a data-processing agreement. Publishers, platforms and Google see only what a specific removal request requires, and never more.

How long we keep it

Case records for six years after closure, which is the limitation period, and then anonymised automatically. Verification evidence for two years. Abandoned checkouts for 30 days. Enquiries marked as spam for 90 days.

Your rights

Access, rectification, erasure, restriction, objection and portability. Clients can export everything we hold from the portal, and request deletion there. Everyone else can email [email protected]. We respond within one month.

You can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.

Security

Sensitive fields — the name, your background, our case notes, every message — are encrypted in the database. Files are encrypted at rest and reachable only through a signed, expiring link. Every staff view of a case is logged. All staff accounts require two-factor authentication.