Skip to content
Check Local
Last updated: 2 July 2026

Privacy Policy

We collect as little as possible, we never sell it, and we explain plainly what each piece is for. This policy explains how Check Local Ltd ("we") handles your personal data under the UK GDPR and the Data Protection Act 2018.

1. What we collect

  • Account data. Email, name, password (hashed with bcrypt) — to identify you and let you sign in.
  • Activity. Your saved shortlist and compare requests — to make the product work.
  • Billing. If you subscribe, Stripe handles your card. We only ever see masked card details and the subscription status.
  • Technical logs. IP, browser, requested URL — kept for 30 days for abuse prevention and debugging.
  • Referral clicks. When you click a partner offer, we record the partner, the area you were on and a timestamp — so we get paid and so we can prove the click was real.
  • Usage analytics (only if you accept). If you accept analytics cookies, Google Analytics records which pages you visit and events like searches and checkout starts, tied to a random browser ID — never your name or email. Nothing is collected if you choose "Essential only".
  • Newsletter signup. If you sign up to the newsletter, your email address is stored with Mailchimp. We use double opt-in — you're only subscribed after confirming by email — and every email has an unsubscribe link.

2. What we don't collect

  • We don't track you across the web.
  • We don't sell your data to anyone.
  • We don't use third-party advertising cookies.
  • We don't profile you for risk scoring or any automated decision-making.

3. Lawful bases

  • Contract — to provide the account, shortlist and Moving Mode you signed up for.
  • Legitimate interests — for service security, fraud prevention, and product analytics aggregated to a level that cannot identify you.
  • Consent — for any optional cookies or marketing email (you can withdraw at any time).
  • Legal obligation — to keep accounting records and respond to lawful requests.

4. Sub-processors

We share data only with the providers that operate the Service for us:

  • Stripe Payments Europe — payments and subscription management.
  • Anthropic — generates Rundowns from area statistics. We do not send your personal data, only the area's public numbers.
  • Google LLC (Google Analytics) — aggregated usage analytics, only if you accept analytics cookies. IP addresses are not logged or stored by Google Analytics 4.
  • Intuit Inc. (Mailchimp) — stores newsletter subscriber emails and sends the newsletter, only if you sign up.
  • Sinch (Mailgun) — sends transactional email (verification codes, contact-form relay).
  • Our hosting provider — runs the servers and database within the UK / EEA.

5. How long we keep it

  • Account — for as long as your account is active, plus 6 months after deletion to handle disputes.
  • Billing — 7 years (UK accounting requirement).
  • Technical logs — 30 days.
  • Referral clicks — 24 months (commission reconciliation).
  • Analytics — Google Analytics event data is retained for 14 months, then deleted.
  • Newsletter — until you unsubscribe (one click in any email) or ask us to delete you.

6. Your rights

You can ask us to:

  • Access the data we hold about you.
  • Correct anything that's wrong.
  • Delete your account and personal data (subject to legal retention above).
  • Export your data in a portable format.
  • Object to a particular processing.

Email [email protected] and we'll act within one calendar month. If you're not happy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

7. International transfers

Primary processing happens in the UK / EEA. Where a sub-processor (e.g. Anthropic, Stripe, Google, Mailchimp) operates outside, transfers rely on UK Adequacy Regulations (including the UK Extension to the EU–US Data Privacy Framework) or the ICO's International Data Transfer Agreement.

8. Changes

We'll tell you by email about any material change before it takes effect.

9. Controller

Data controller: Check Local Ltd, a company registered in England and Wales under company number 17165781, with its registered office at 66 Paul Street, London, England, EC2A 4NE. Contact: [email protected].