Privacy Policy

Last updated: 7 August 2026

This policy explains how findcompany.info, operated by Bradshaw Pearson Limited (“we”, “us”), collects and uses personal data when you use the Service. We are the data controller. We are registered with the Information Commissioner’s Office (ICO) under ZA556902.

1. What we collect

• Account details — your email address, password (stored only as a secure hash), and optionally your name, telephone number and, if you sign in with Google, your name and profile photo.
• Organisation & billing — your organisation name and a billing address used on invoices; the company you represent (for business accounts).
• Payments — handled by Stripe. We receive confirmation and limited transaction details (amount, status); we never see or store your full card details.
• Usage — the reports you run, your credit balance and purchase history.
• Technical — your IP address and basic request information, kept in security logs and used for rate-limiting and fraud prevention.
• Cookies — strictly necessary cookies only (see our Cookie Policy).

2. How we use it, and our lawful bases

• To provide the Service (create your account, run reports, take payment) — performance of our contract with you.
• To keep the Service secure (authentication, rate-limiting, preventing fraud and abuse) — our legitimate interests.
• To sign you in with Google, where you choose to — your consent.
• To meet legal obligations (e.g. accounting and tax records) — legal obligation.

3. Who we share it with

We use a small number of trusted providers who process data on our behalf under contract:

• Stripe — payment processing.
• Google — only if you choose to sign in with Google.
• Our hosting and email providers — to run the Service and send transactional emails (e.g. verification codes).

To produce a report, we send a company number to Companies House and to our licensed data provider to retrieve information about that company; we do not share your account personal data with them for this purpose. We do not sell your personal data.

4. International transfers

Some providers (for example Stripe) operate internationally. Where personal data is transferred outside the UK, we rely on an adequacy decision or appropriate safeguards (such as the UK International Data Transfer Agreement / Standard Contractual Clauses).

5. How long we keep it

• Account data — for as long as your account is active, and for a reasonable period afterwards.
• Reports — viewable for 30 days, then the rendered report expires.
• Security logs — to protect accounts we keep a record of sign-in attempts (including the email address entered and the IP address) for around 90 days, on the basis of our legitimate interest in preventing unauthorised access and fraud.
• Financial records — as required by law (generally six years for UK tax).

6. Your rights

Under UK GDPR you have the right to access, correct, delete or restrict your personal data, to object to certain processing, to data portability, and to withdraw consent where we rely on it. To exercise any of these, contact us at privacy@findcompany.info. You also have the right to complain to the ICO.

When you ask us to delete your data, we delete or anonymise your personal data. We may keep the minimum financial records the law requires (for example invoice and payment records for UK tax) for the statutory period, but in a form that no longer identifies you.

7. Security

We protect your data with measures including strong password hashing (Argon2id), encrypted transport (HTTPS), one-time-code verification, strict access controls, and storing secrets and session data outside the public web root.

8. Children

The Service is for business users aged 18 or over and is not directed at children.

9. Changes & contact

We may update this policy and will change the “last updated” date above. For any privacy question or request: