Privacy notice
Draft for legal review. Placeholders in [square brackets] need confirming before launch.
Who is responsible
Mabel Tech, [company name, registered number and registered office], is the controller of personal data processed through SiteSignal under the UK GDPR and the Data Protection Act 2018. Contact: [privacy contact email].
What we collect
We do not ask you to create an account or give your name. When you use SiteSignal, the following is processed:
- The postcode you search. A postcode on its own is usually not personal data, but it can be if it is linked to you.
- Your IP address and basic technical data (browser type, time of request), which every website receives to deliver pages.
We do not use advertising or analytics cookies.
Why we use it and our lawful basis
We use this data to produce your report, to keep the service secure and working, and to prevent abuse. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): running a service you have chosen to use.
Who receives it
| Recipient | What they receive | Why |
|---|---|---|
| Cloudflare, Inc. (hosting and edge caching) | Your IP address, the postcode you search, technical request data | Hosts the site and runs the report service |
| unpkg.com (open-source code delivery network) | Your IP address and technical request data | Delivers the MapLibre map code to your browser |
| OpenFreeMap (map tiles) | Your IP address and the map area you view | Delivers the base map to your browser |
| Public data services: postcodes.io, Environment Agency, planning.data.gov.uk, data.police.uk, Nomis (ONS), Food Standards Agency, OpenStreetMap services | The postcode or its map coordinates, sent from our servers, not your IP address | Looks up the open data in your report |
Some of these providers are based in or process data outside the UK, including in the United States. Where they do, we rely on [UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Addendum], as applicable.
How long we keep it
Reports are cached by postcode for up to 24 hours so repeat searches are fast. The cache does not store your IP address. Hosting providers keep server logs for short periods under their own policies: [confirm Cloudflare log retention].
Your rights
You have the right to access, correct, erase or restrict the use of your personal data, to object to how we use it, and to data portability. Contact us at [privacy contact email]. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will post any changes here and update the date at the top.