Privacy Policy

We collect the following categories of personal information:

• Postcode data — when you enter a postcode to check your council tax band. This may be combined with your house number if you provide it.
• Email address — when you request an evidence pack or appeal document to be sent to you.
• Appeal information — your council tax band, nearby comparable properties, and the outcome of your appeal if you choose to record it.
• Testimonial content — your first name, area, and feedback if you voluntarily submit a testimonial about your experience.
• Usage data — anonymised analytics about how users interact with our service (pages visited, features used), collected via server logs and analytics tools.
• Device and technical data — IP address, browser type, operating system, and device identifiers collected automatically when you access our Service.

We use your personal data for the following purposes:

• To deliver the council tax band check and analysis service
• To generate and send your evidence pack and appeal documents by email
• To track your appeal progress and remind you of key steps (with your permission for notifications)
• To improve our accuracy by aggregating anonymised check data across districts
• To respond to your support requests and communications
• To display anonymised social proof (testimonials) on our website, with your explicit consent
• To comply with our legal and regulatory obligations

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.

We rely on the following legal bases under UK GDPR:

• Contract performance — processing necessary to provide the Service you have requested (e.g. running a postcode check, generating an appeal pack).
• Legitimate interests — improving our service, preventing fraud, and understanding how users engage with BandCheck AI, where these interests do not override your rights.
• Consent — sending you push notifications, displaying your testimonial, or sending marketing communications. You may withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with applicable law.

Your data is stored securely on servers provided by Railway (PostgreSQL database) and Vercel (hosting infrastructure), both of which operate from data centres within the UK and European Economic Area. We apply industry-standard technical and organisational security measures including encrypted connections (TLS), access controls, and regular security reviews.

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law. Postcode check data used for aggregate analytics is anonymised after 90 days. Email addresses associated with appeal packs are retained for 24 months unless you request earlier deletion.

We do not sell your personal data. We share your information only in the following circumstances:

• Service providers — trusted third parties who assist us in operating our Service (e.g. email delivery, cloud hosting, analytics). These providers act as data processors under our instruction and are bound by appropriate data processing agreements.
• Legal requirements — where we are required to disclose information by law, court order, or to protect the rights, property, or safety of BandCheck AI, our users, or the public.
• Business transfers — if BandCheck AI is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you before any such transfer and you will have the right to object.

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate data corrected.
• Right to erasure — to request deletion of your personal data (“the right to be forgotten”), subject to certain legal exceptions.
• Right to restrict processing — to ask us to pause the processing of your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making — we do not use automated profiling that produces significant effects on you.

To exercise any of these rights, contact us at privacy@bandcheckai.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website uses essential cookies necessary for the Service to function (e.g. session management). We do not currently use advertising or tracking cookies. Analytics data is collected in an aggregated, anonymised form that does not identify individual users.

Our mobile application uses local device storage to save your case progress, appeal status, and notification preferences. This data is stored on your device only and is not transmitted to our servers unless you explicitly submit a check or appeal.

Our Service may contain links to external websites, including the Valuation Office Agency (VOA), Land Registry, and GOV.UK. These websites are not operated by us and we are not responsible for their privacy practices. We encourage you to read their respective privacy policies.

Our Service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@bandcheckai.co.uk.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: