Legal

Privacy & Cookie Policy

Last Updated: 16 January 2026

Data Controller

CHECKALL.CO.UK

privacy@checkall.co.uk

What we collect

  • Usage data: IP, browser, OS, pages viewed, timestamps
  • Device info: type, identifiers, mobile network
  • Approximate location from IP
  • Account info (if you sign in): email, name, encrypted password, saved companies/preferences
  • Analytics: searches, filters, pages visited, session duration

How we use it

  • Provide and maintain the service
  • Personalise saved searches and preferences
  • Analyse usage to improve the product
  • Detect and prevent security issues
  • Meet legal obligations

Legal bases (UK GDPR)

  • Legitimate Interests: operations, analytics, security
  • Consent: cookies (where required), marketing (if applicable)
  • Legal Obligation: compliance with UK law
Section 2

Information We Collect

Automatically Collected

  • Usage data (IP, browser, OS, pages, timestamps)
  • Device info (type, identifiers, mobile network)
  • Approximate location (IP-based)

Cookies & Tracking

We use cookies and similar technologies to operate and improve the service. See Cookie Policy below.

User Account (if applicable)

  • Email, name, encrypted password
  • Saved companies and preferences

Analytics

  • Search queries and filters
  • Pages visited and interactions
  • Session duration and frequency
Section 3

How We Use Your Information

Purposes

  • Provide and maintain the service
  • Personalise experience (saved searches, preferences)
  • Analyse usage to improve the product
  • Detect and prevent technical/security issues
  • Comply with legal obligations

Legal Basis (UK GDPR)

  • Legitimate Interests: operations, analytics, security
  • Consent: cookies (where required), marketing (if used)
  • Legal Obligation: compliance with UK laws
Section 4

Data Sources

All sponsor company data is public:

  • UK Home Office Register of Licensed Sponsors
  • UK National Archives historical records
  • Companies House API

This includes company names, addresses, license status, and routes. We do not collect personal data about individual employees of sponsor companies.

Section 5

Data Sharing & Disclosure

We do NOT sell your personal data.

We may share with

  • Service Providers: hosting, CDN, analytics (under DPAs)
  • Legal Requirements: when required by law or to protect rights
  • Business Transfers: merger/acquisition notifications

Third-Party Services

  • MongoDB Atlas (EU)
  • Redis (EC2 EU)
  • IP Geolocation API (approximate location only)
Section 6

Data Retention

  • Usage Logs: 90 days
  • Account Data: until deletion or 2 years inactivity
  • Analytics: aggregated indefinitely; individual data anonymised after 12 months
Section 7

Your Rights (UK GDPR)

  • Access, Rectification, Erasure (right to be forgotten)
  • Restrict Processing, Data Portability, Object
  • Withdraw consent (cookies/marketing)

Exercise your rights

Email privacy@checkall.co.uk. We respond within 30 days.

Complain to the ICO

UK ICO: https://ico.org.uk/make-a-complaint/ • 0303 123 1113

Section 8

Cookie Policy

What are cookies?

Small text files stored on your device to help operate and improve the service.

Cookie TypePurposeDurationLegal Basis
EssentialCore functionality (login, saved searches, security)Session / 1 yearLegitimate Interest (strictly necessary)
AnalyticsUsage to improve the service (views, searches, duration)12 monthsConsent (via banner)
PreferenceRemember settings (theme, language, dismissed notices)1 yearConsent

Managing cookies

  • Cookie banner: accept/dismiss non-essential cookies
  • Browser settings: block or delete cookies
  • Opt-out tools: cookie settings in your account/preferences (if available)

Blocking essential cookies may break core features.

Section 9

International Transfers

Data is primarily stored in EU/UK (AWS Europe, MongoDB Atlas EU). If transferred outside UK/EU, we apply UK GDPR-compliant DPAs and Standard Contractual Clauses.

Section 10

Children's Privacy

Service is not for individuals under 18. If such data is found, it will be deleted immediately.

Section 11

Security

Encryption in transit (TLS), encrypted storage, access controls, authentication, and regular security reviews. No internet transmission is 100% secure.

Section 12

Changes

We update this policy periodically. We post changes with an updated "Last Updated" date. Continued use means acceptance.

Section 13

Contact

Email: privacy@checkall.co.uk

Website: https://checkall.co.uk/contact