- Home
- Privacy
Privacy notice
Who we are
IR35 Checker is the data controller for personal data processed through this website. You can contact us about privacy at fynleyeg17@gmail.com.
What we collect
- Documents you upload — your contract and any optional supporting document. These usually contain personal data about you and possibly others (names, addresses, rates, signatures).
- Your answers and notes about how you work.
- Payment and contact details — your email address, name and billing details are collected by Stripe at checkout. We receive your email address and the payment status; we never see or store your full card number.
- Technical data — such as IP address and browser information in server logs kept by our hosting provider, used for security and to prevent abuse.
How we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Analysing your documents and answers and producing your report | Performance of a contract with you |
| Emailing you a link to your report and service messages | Performance of a contract with you |
| Taking payment and keeping accounting records | Contract and legal obligation |
| Keeping the service secure and preventing fraud or abuse | Our legitimate interests |
We do not sell your data, use it for advertising, or use your documents to train AI models. Your report is generated automatically, but it does not make any decision about you that has legal or similarly significant effects.
Who we share it with
We use these service providers (processors), who act only on our instructions:
- Anthropic — provides the AI model that analyses your documents. Under its commercial terms it does not train its models on our customers' content, and it keeps API data only for a limited period.
- Stripe — processes payments.
- Vercel — hosts the website and application.
- Our database provider — stores your report and, briefly, your uploaded documents.
- Our email provider — sends your report link.
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on appropriate safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.
How long we keep it
- Uploaded documents — deleted as soon as your report has been generated. If you don't complete payment they are deleted within 24 hours; if a paid report can't be produced, within 30 days.
- Your report and answers — deleted 30 days after you created the report. Download the PDF if you want to keep it.
- Payment records — kept by us and Stripe for as long as the law requires for tax and accounting purposes (normally six years).
Cookies and browser storage
We don't use advertising or tracking cookies. While you fill in the form, your answers are kept in your own browser's session storage so they aren't lost if you cancel payment; this never leaves your device until you submit. Stripe sets its own cookies on its checkout page to process payment and prevent fraud.
Security
Everything is sent over HTTPS. Report links contain a long random code that can't be guessed — but anyone with the link can view the report, so only share it with people you trust, such as your accountant.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, and to data portability. To use these rights, contact us from the email address you used at checkout. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — but we'd appreciate the chance to put things right first.
Changes
We'll update this notice if how we use data changes, and show the date at the top.