Privacy policy

Last updated 12 November 2026.

This policy explains what personal data EUCompanyCheck collects about its users, why, and your rights under the UK GDPR and the EU GDPR. EUCompanyCheck is the controller of this data. Contact: EUCompanyCheck support.

What we collect

• Account data: your email address, when you signed up and last signed in, and your plan.
• Billing data: your subscription status, invoices and the identifiers our payment provider gives us. Card details are handled by our payment provider and never reach us.
• Report orders: the company and the report you ordered, the email address the report goes to, the payment status and the identifiers our payment provider gives us, your account if you were signed in, and the report we deliver. Your account lists the paid orders placed while you were signed in and those paid with your account's email address, and lets you download their delivered reports.
• Usage data: for each tool call, which tool, which country, when, and whether it succeeded, so we can enforce plan limits and show you your usage. We do not receive or store the questions you ask your assistant or its conversations.
• Security data: sign-in links and app access tokens, stored only as one-way hashes; the apps you connected; short-lived records of network addresses used to prevent abuse of sign-in emails, app registration, company lookups and report orders; and, for each sign-in request, a security notice to our team with the email address used, the network address, approximate location and device details.
• Technical data: standard server logs kept by our hosting provider for security and troubleshooting.

Why we use it (legal bases)

• To provide the Service, run your account, prepare and deliver the reports you order and take payment (performance of our contract with you).
• To keep the Service secure, prevent abuse and fix problems (our legitimate interests).
• To keep accounting and tax records (legal obligation).

We do not sell your data, use it for advertising, or send marketing email. We send service email only: sign-in links, order confirmations and the reports you order, and messages about your account or subscription.

Who processes it for us

We use a small number of carefully chosen service providers, each bound by a data-processing agreement and allowed to use the data only to provide their service to us:

• our hosting and network-security provider;
• our payment provider, which handles card payments, subscriptions and invoices;
• our email providers, which send sign-in emails, order confirmations and our security and order notices.

Some of these providers process data outside the UK and EEA; where they do, the transfer is covered by adequacy regulations or standard contractual clauses. Write to us for the current list of providers.

How long we keep it

• Account data: while your account exists. Delete your account on your account page and it is removed straight away.
• Usage records: 90 days for the detailed log; monthly totals while your account exists.
• Copies of public register documents fetched through the service: up to 90 days, then deleted. Download links work for 7 days.
• Sign-in links: unusable after 15 minutes and deleted within a day. Sessions: 30 days.
• Billing records, including paid report orders and their delivered reports: as long as tax and accounting law requires, usually six years. Orders that never reach payment: deleted after 30 days.
• Company ownership pages: until the page is refreshed from newer filings, or it is removed on request.

Register information about other people

Company registers publish personal data about directors, shareholders, people with significant control and other officers. When you ask for it through the Service, EUCompanyCheck passes on what the register publishes and keeps no copy beyond what is needed to answer the request.

EUCompanyCheck also publishes pages about the ownership of UK companies. They are built from the confirmation statements that companies file at Companies House, which list their shareholders and which Companies House makes public for anyone to use. Where a shareholder is a person, a page shows what the statement shows: the name as filed, the shares held and their class. Pages also list the company's officers as the Companies House register shows them: name, role, appointment and resignation dates, nationality and country of residence; and its people with significant control as the register of persons with significant control shows them: name, the nature of their control, the dates they were notified and ceased, nationality and country of residence, or for a company or other legal person its legal form, where it is registered and its registration number. Pages never show an address or a date of birth. We publish them because transparency about who owns companies is in the public interest, which is also why these filings are public (legitimate interests). If a page shows your name and you want it corrected or removed, or you object to it, write to EUCompanyCheck support; we act within one month. Requests about how a register itself handles your personal data, including protecting your details on it, should go to that register.

Your rights

You can ask for a copy of your data, its correction or deletion, a restriction of or objection to its use, and a portable copy. Write to EUCompanyCheck support; we answer within one month. You can also complain to the Information Commissioner's Office (ico.org.uk) or your local data-protection authority.

Cookies

We use one cookie of our own, __Host-ec_session, to keep you signed in. It is strictly necessary, so it needs no consent. We use no analytics cookies.