Privacy Policy

1. Introduction

Optional LTD ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at companymap.co.uk (the "Service").

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Registration Intent Data

When you register your interest via contact forms, we collect: name, email address, company name (optional), and message content. Legal Basis: Legitimate interests and consent.

2.2 Payment Information

Payment processing is handled exclusively by Stripe. We do not store your payment card details directly. We retain from Stripe: transaction ID, timestamp, amount, currency, payment status, last 4 digits of card, billing email, and Stripe customer ID. This is used for accounting, tax compliance, fraud prevention, and customer support. Legal Basis: Contract fulfillment and legal obligations.

2.3 Usage Data

We collect anonymous usage analytics via Plausible Analytics, which does NOT use cookies and does NOT track individual users. Data collected (aggregated only): page views, navigation patterns, referrer sources, approximate location (country/city), device type and browser. Legal Basis: Legitimate interests.

2.4 Export Data Logs

When you export company data, we log: timestamp, number of records, export type (CSV), and associated payment transaction ID. Used for usage monitoring, fair use enforcement, support, and accounting. Legal Basis: Contract fulfillment and legitimate interests.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service: Process exports, manage platform access
• Process payments: Via Stripe, with transaction records for accounting
• Communicate with you: Respond to inquiries, send service updates
• Improve our Service: Analyze usage patterns (via Plausible Analytics)
• Comply with legal obligations: Tax reporting, accounting, regulatory compliance
• Prevent fraud: Transaction monitoring and security

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share data only with: Stripe (payment processing), Plausible Analytics (privacy-focused analytics), and hosting providers (infrastructure and data storage, subject to strict data processing agreements).

We may disclose information if required by law, regulation, legal process, or governmental request. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Retention

• Registration Intent Data: Retained until you request deletion or for 2 years of inactivity
• Payment Transaction Data: Retained for 7 years (UK tax and accounting requirements)
• Usage Analytics: Aggregated data retained indefinitely (cannot be attributed to individuals)
• Export Logs: Retained for 1 year for support and fair use monitoring

6. Your Data Protection Rights (UK GDPR)

You have the right to: access your personal data, rectify inaccurate data, request erasure (subject to legal retention requirements), restrict processing, data portability, object to processing, and withdraw consent.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS)
• Secure data storage with access controls
• Regular security assessments and updates
• Strict data processing agreements with third-party providers

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Cookies, Children's Privacy & Other Policies

We do NOT use tracking cookies or third-party advertising cookies. See our Cookie Policy for full details.

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

9. International Data Transfers & Policy Changes

Your data is primarily stored and processed in the UK/EU. If data is transferred outside the UK/EU, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

We may update this Privacy Policy from time to time. Significant changes will be communicated by posting the updated policy on this page, updating the "Last Updated" date, and emailing registered users for material changes.

10. Contact Us

11. Supervisory Authority

You have the right to lodge a complaint with the UK data protection supervisory authority: