Privacy, in plain English.

When you create an account, we collect your email address, name, phone number, business name, and the postcode or council areas you choose. You can also give us your website, main trade, and team size. If you subscribe, Stripe handles your payment details. We do not store your full card number.

Our sample-list form and popup collect the email address and postcode you submit, plus whether you ticked Email me new jobs and offers. You can optionally add the same business details after requesting a sample.

We also process planning information from public council registers. That can include application addresses, proposals, status, applicant names, agent names, dates, and links to the council record.

Contract: we use your account email and chosen areas to provide the Sites Signal feed and email digest you pay for.

Legitimate interests: we collect and organise public planning-register information, including applicant names published by councils, so we can provide a useful lead service. We keep this processing proportionate and link back to the public source.

Consent: we send marketing emails about new jobs and offers only when you tick the marketing-consent box. You can withdraw that consent at any time.

Planning data comes from public UK council planning registers. We do not buy private homeowner lists.

We use Supabase for the database and account authentication, Stripe for subscriptions and payments, Vercel to host the website, and Amazon Web Services SES to send sample lists and Monday digests from our verified domain.

We keep account and area information while your account is active and normally for up to two years after closure. We keep payment and accounting records for as long as the law requires.

Planning-register data is kept while it is needed to provide the service, then removed or reduced to useful aggregates. Popup enquiries are reviewed and deleted when they are no longer useful. If you opt out of marketing, we keep a small suppression record so we do not email you by mistake.

You can ask for a copy of your personal data, ask us to erase or correct it, or object to processing based on legitimate interests. You can withdraw marketing consent at any time.

Email privacy@sitessignal.com. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

We only use essential cookies needed for the Supabase authentication session. They keep you signed in and do not track you for advertising or analytics.

Because these cookies are essential to a service you asked to use, we do not use a cookie-consent popup. We do not set advertising or optional analytics cookies.

Questions about privacy or your data: privacy@sitessignal.com.