Legal
Privacy policy
Draft version 2026-10-draft
DRAFT: not yet legal advice and not yet reviewed by a solicitor.
This page is a working draft prepared from public guidance (ICO, the Consumer Contracts Regulations 2013 and the Consumer Rights Act 2015). Items in [square brackets] must be completed, and the whole page reviewed by a qualified solicitor, before Postcode Pulse takes real payments.
Who we are
Postcode Pulse is run by [legal name of the company or sole trader], [registered address], [company number] (“we”). We are the controller of the personal data described here. We are registered with the Information Commissioner's Office under number [ICO registration number]. Contact us about privacy at privacy@postcodepulse.co.uk.
What we collect and why
| Information | Why we use it | Lawful basis |
|---|---|---|
| Your email address | To send your report link, receipts and, for pass holders, sign-in links | Contract |
| Order details (product, price, time, Stripe payment reference) | To supply what you bought, keep accounts and handle refunds or disputes | Contract; legal obligation (tax records) |
| Your agreement to immediate supply and the version of the terms you accepted | To show you agreed to receive the report straight away | Legal obligation; legitimate interests |
| Postcodes and addresses you ask us to report on, and the reports we make | To produce and show your reports and comparisons | Contract |
| Sign-in session (a random token in a cookie) | To keep pass holders signed in, and for security | Contract; legitimate interests (security) |
| Technical logs (IP address, browser, pages requested) | Security, preventing abuse and fixing faults | Legitimate interests |
We do not need, ask for or infer any special category data (such as health or ethnicity). We don't sell your data or use it for advertising, and we send no marketing emails.
Data about places and properties
Reports combine public datasets such as HM Land Registry sold prices and Energy Performance Certificates, which can relate to identifiable homes. We use this information under the licences of the bodies that publish it to provide property and area information, show only what a report needs, and do not combine it with information about who lives at an address. If you think data about you is shown wrongly, contact us and the publisher concerned.
AI-written summaries
A short summary at the top of each report is written by an AI model provided by Anthropic. We send it only aggregated facts about the area (for example average crime counts or median prices). We never send your email address, payment details, the address you typed or any other information that identifies you. The summary is checked automatically against the report's data before it is shown, and the data tables take precedence.
Who we share data with
- Stripe, which processes card payments. We never see or store your card details.
- Anthropic, which writes report summaries from aggregated area data (see above).
- [Email provider], which delivers our emails.
- [Hosting and database provider], which runs our servers in [region].
- OpenStreetMap: maps on our pages are loaded by your browser from OpenStreetMap's tile servers, which receive your IP address and the map area shown.
- Professional advisers and authorities when the law requires it.
When we look up public data we send only postcodes or map coordinates to the publishers, never information about you.
International transfers
Some providers process data in the United States. Where they do, we rely on [the UK Extension to the EU-US Data Privacy Framework / the UK International Data Transfer Agreement or Addendum], as set out in our contracts with them. [Solicitor to confirm each provider's transfer mechanism.]
How long we keep it
| Sign-in links | 20 minutes, or until used |
| Sign-in sessions | 30 days, or until you sign out |
| Reports you bought | [12 months] from purchase (or from the end of your pass) |
| Orders, payment records and consent records | 6 years after the end of the financial year of the purchase |
| Technical logs | 30 days |
Cookies and similar storage
We only use storage that the site needs to work, so we don't ask for cookie consent:
pp_session: keeps a pass holder signed in (HttpOnly cookie, 30 days).themein your browser's local storage: remembers the light or dark mode you chose.
We use no analytics or advertising cookies. We do count page views and measure page speed with Vercel Web Analytics and Speed Insights, which set no cookies and do not identify you: they record the page, your browser and device type and your country, and visitors are counted with a hash that changes every day. If we ever add cookies for analytics we will ask first.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Contact privacy@postcodepulse.co.uk; we will reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we'd like the chance to put things right first.
Children
Postcode Pulse is for adults. You must be 18 or over to buy a report or pass.
Changes
We will update this page if anything changes and show the date of the latest version at the top.