Privacy policy

1. Who is responsible

Fair Band is operated from the United Kingdom. We are the controller of the personal data described here under the UK GDPR and the Data Protection Act 2018. Contact: hello@checkfairband.co.uk.

2. What we collect

Account: your email address, and a scrambled (hashed) version of your password if you set one. When you sign in with an emailed code or link, we keep only a hashed copy of it until it is used or expires.

The homes you check: the address, the details you enter, the bands you paste from gov.uk, and the report we produce. The bands you paste include other homes' addresses and Council Tax bands. These are public records: we keep them only as part of your report, show them only to you, and use them for nothing else.

Waiting list: whether you asked to hear when our challenge service launches, and the home you asked about.

Payments: handled by Stripe. We receive the payment status, amount and date and the email you paid with, never your card number.

Technical: one essential cookie that keeps you signed in, records of recent sign-in attempts to stop password guessing, and short-lived security logs (which can include your IP address) kept by our hosting provider.

Visit statistics: Cloudflare Web Analytics counts page views, the page you came from, your browser type and your country. It sets no cookies, doesn't store your IP address and doesn't follow you across other sites.

3. Why we use it, and on what basis

To provide what you asked for: your account, your reports, payments and the emails that go with them (contract).

To keep the service secure and prevent abuse, and, with names and email addresses removed, to measure and improve how accurate our checks are (our legitimate interests).

To email you when our challenge service launches, only if you joined the waiting list (consent). You can withdraw at any time by writing to hello@checkfairband.co.uk.

To keep accounting and tax records (legal obligation). We do not sell your data, and we use no advertising or tracking.

4. Who processes it for us

Cloudflare hosts the website and stores your account and reports, sends our emails and runs our domain. Stripe processes payments. Each acts on our instructions under a data processing agreement.

To check a home we look up public data from HM Land Registry and postcodes.io. We send them the postcodes involved, never your name or email address.

Cloudflare and Stripe are based in, or may process data in, the United States and other countries. These transfers are protected by the UK–US data bridge, or by the UK International Data Transfer Addendum and standard contractual clauses.

5. How long we keep it

Your account and reports: while your account is open, and deleted within 30 days after you ask us to close it. Sign-in codes: 10 minutes. Emailed links: until used or expired, at most 48 hours. Records of sign-in attempts: 24 hours. Signed-in sessions: until you log out, or one year. Waiting list: until we have emailed you about the launch, or you ask us to remove you. Payment records: 6 years, as tax law requires.

6. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to hello@checkfairband.co.uk; we reply within one month.

You can also complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to sort it out first.

7. Cookies

We use one cookie, which keeps you signed in. It is strictly necessary, so it doesn't need consent, and we use no advertising or tracking cookies. Our visit statistics (Cloudflare Web Analytics) don't use cookies at all. Stripe sets its own cookies on its payment page to prevent fraud.

8. Children

The service is not for anyone under 18, and we do not knowingly collect their data.

9. Changes

If we change this policy in a way that matters, we will tell you by email or on the site before the change takes effect.