Privacy

What we collect

If you leave an email address, we store that email address and the exact wording you agreed to at the time (so we can show what you actually consented to, not a later version of it). If you run the free check and then leave your email, we also store your answers and the result it gave you, so we can email it to you. If you get in touch as an organisation, we store what you tell us about it: organisation name, your name, approximately how many premises you look after, the type of organisation, and your message.

If you put yourself forward on our For advisers page, we store what you tell us there: your name, your organisation and phone number if you give them, your email address, what qualifications and memberships you hold, the UK regions you cover, your answer about professional indemnity insurance, roughly how many reviews a month you could take on, and anything else you write. We also store the exact wording that was shown to you beside the button at the time, so we can show what you were actually told.

We also keep a one-way, salted hash of the IP address a submission came from — never the address itself — and the browser’s user agent string, only to stop the same form being spammed, not to identify anyone personally.

Why, and on what legal basis

We email you the result of your own check because you asked for it — that relies on our legitimate interest in giving you what you just requested, not on consent. Before we send it, we ask you to confirm your email address by selecting a link in a short message, so we are not sending a result to someone who never asked for one. Anything beyond that — telling you when the start date is announced, or any other update — relies on your consent, which you give by leaving your email address against that wording, and which you can withdraw at any time (see “Unsubscribing and deletion” below).

If you put yourself forward as an adviser, we hold those details because you asked us to consider you, and we need them to do that and to reply to you — our legitimate interest in answering an enquiry you started, and yours in getting an answer. That is not consent and not a mailing-list sign-up: adviser enquiries go on no list, and we don’t pass them to anyone else. You can object to us holding them, or ask us to delete them, at any time.

Who processes it

We store what you give us in Supabase, hosted in the UK. If you ask to hear from us, we send that email through Resend. The plan is to manage mailing-list sign-ups through Buttondown; that part isn’t switched on yet.

Resend is switched on, so the confirmation email, the result once you confirm, the start-date update, and the acknowledgement of an adviser enquiry can all be sent today.

How long we keep it

We have not yet set a fixed length of time we keep this information for. Until we do, we’ll keep it for as long as it’s useful to the purpose above, and you can ask us to delete it at any time — see below.

Unsubscribing and deletion

Email hello@premisesready.uk at any time to ask us to stop contacting you, or to delete your data entirely, and we will. Once our mailing-list tool is connected, every update email will also carry its own unsubscribe link.

Questions

If anything here is unclear, email hello@premisesready.uk and we’ll answer directly.