StillRecommended
DOC. NO.
SR-PRIV-1
ISSUED
12.08.26
STATUS
DRAFT

Privacy policy

Short version: we hold what you typed on the order form, your email address and your payment receipt. We use it to write your report and to send it to you. We don't sell it and we don't build a profile of you. We'll only email you beyond your report or receipt if you tick the box to say you want that — and every email has an unsubscribe link.

MARKETING
OPT-IN
UNSUBSCRIBE ANYTIME
1
Who holds your information

StillRecommended Ltd, company number 00000000, registered in England & Wales, registered office [address]. We are the data controller. Questions, or any request under this policy: hello@stillrecommended.co.uk.

2
What we hold, and why
Order form detailsBusiness name, your name, industry, areas, named rivals, listings you tick, notes. Used to run the check and write the report.
Email addressTo send the report and receipt, and to reply if you write to us.
Phone number, if givenOnly to ask you something about your order. Optional, and we won't ring you to sell anything.
Payment recordAmount, date and a reference from Stripe. We never receive your card number.
Free check submissionsIndustry and area, and the email address if you give one. Kept for 90 days, then deleted.
Marketing consentOnly if you tick the box — never on by default. Your email address and the date you opted in, so we can prove consent. Kept until you unsubscribe.
3
Our lawful basis

Performance of a contract — we need your order details to produce the report you paid for. Legal obligation — we keep invoices and VAT records for six years because HMRC requires it. Consent — if you tick the marketing box, that consent is our lawful basis for emailing you again, and you can withdraw it at any time.

4
What we send where

Card payments are handled by Stripe. Email is sent through [email provider]. Files and order records are held in [hosting provider], within the UK or EEA where the provider offers it. These suppliers process data on our instructions and nothing more.

The questions we ask AI assistants are about your industry and area — for example “who's a good plumber in Stockport”. We do not type your email address, phone number or any other personal detail into an AI assistant.

5
How long we keep it

Order details and your report: two years, so we can send it again if you lose it and compare if you order another. Invoices and VAT records: six years, as required. Free check submissions: 90 days. Emails you send us: two years. Marketing consent: until you unsubscribe, which you can do from any email or by writing to us. Then deleted.

6
Cookies

No advertising cookies, no tracking pixels, no analytics that follow you elsewhere. The only cookie set is the one Stripe needs to take a payment securely. There is no cookie banner because there is nothing to consent to.

7
Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it — we will, apart from the invoice records we're legally required to keep. Email us and we'll reply within 30 days, usually far sooner. If you're not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

8
Agencies ordering for clients

If you order a report about a client's business, you're responsible for having their agreement to give us their details. We deal with you, send the report to you, and hold the client's business details on the same terms set out above.

The commercial terms are separate — see the terms of service.VERSION 0.1 — DRAFT, PENDING LEGAL REVIEW