Privacy Policy

Last updated: 30 June 2026

1. Who We Are

UK Content Comply (operated at ukcontentcomply.uk) is a service that analyses documents against UK speech law frameworks. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

2. Information We Collect

2.1 Information You Provide

• Documents: When you upload a document (.txt, .md, .pdf, .docx) for analysis, we temporarily store the file and its extracted text content to perform the analysis.
• Account Information: If you register for an account, we collect your name, email address, and password (stored securely as a hashed value).
• Payment Information: If you subscribe to a paid plan, payment processing is handled securely by Stripe. We do not store credit card details.
• Communications: When you contact us via email or our contact form, we retain the contents of your message.

2.2 Information Collected Automatically

• Usage Data: We may collect information about how you interact with the service, including pages visited, features used, and time spent.
• Technical Data: IP address, browser type and version, operating system, device type, and referral source.
• Cookies: We use essential cookies to maintain session state and functionality. See our Cookie Policy for details.

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following lawful bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., cookies).
• Contract: Where processing is necessary to perform our contract with you (e.g., providing document analysis services).
• Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., improving our service, fraud prevention), provided these do not override your rights.
• Legal Obligation: Where we are required to process data to comply with a legal obligation.

4. How We Use Your Information

• To provide document analysis against UK speech law frameworks
• To process your account registration and manage your subscription
• To communicate with you about your account, billing, and service updates
• To improve and optimise our service
• To comply with legal and regulatory obligations
• To detect and prevent fraud or misuse of the service

5. Data Storage and Security

• Uploaded documents are stored securely and deleted after analysis is complete, unless retained for your account history
• Analysis results are stored in an encrypted database
• Passwords are hashed using bcrypt
• All data transmission uses TLS/SSL encryption
• Access to personal data is restricted to authorised personnel only

6. Data Retention

• Analysis Results: Retained for the duration of your active subscription plus 90 days after cancellation, unless you request earlier deletion.
• Account Information: Retained until you delete your account or for as long as necessary to provide the service.
• Uploaded Documents: The original uploaded file is deleted from our servers within 30 days of analysis.
• Communications: Retained for 2 years.

7. Data Sharing

We do not sell your personal data. We may share your data with:

• Service Providers: Third-party processors who help us deliver the service (e.g., Stripe for payment processing, DeepSeek for analysis). These providers are contractually bound to process data only on our instructions and in compliance with UK GDPR.
• Legal Authorities: Where required by law, court order, or to protect our legal rights.

8. International Data Transfers

Some of our service providers may be located outside the UK. Where we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements or adequacy decisions by the UK Government.

9. Your Rights (Under UK GDPR)

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no compelling reason to retain it.
• Right to Restrict Processing: Request that we restrict processing of your data.
• Right to Data Portability: Request transfer of your data to another controller.
• Right to Object: Object to processing based on legitimate interests.
• Rights Related to Automated Decision-Making: Object to decisions based solely on automated processing.

To exercise any of these rights, write to us at the address below.

10. Complaints

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you via email or a prominent notice on our website.