Privacy notice
Draft for approval. Last updated: [PLACEHOLDER: date approved].
The Contraflow is a trading name of RAMCo Property Ltd, a company registered in England and Wales (company number 11906139), whose registered office is at C/O Black Fox Advisers Limited, Fletchers Business Centre, Grendon Road, Polesworth, B78 1NS. Contact: hello@thecontraflow.co.uk. We are not registered for VAT.
We are the data controller for the personal data described here. ICO registration (data protection fee) number: [PLACEHOLDER: ICO registration number].
What we collect and why
| Data | Why we use it | Lawful basis (UK GDPR) | How long we keep it |
|---|---|---|---|
| Email address (and optionally name and company) for the free newsletter | To send the Monday briefing | Consent. You can withdraw it at any time with the unsubscribe link. | Until you unsubscribe, then a suppression record so we don't email you again |
| Email, plan, Stripe customer and subscription IDs, chosen regions and keywords for paid alerts | To send the daily alerts you pay for and manage your subscription | Contract | For the subscription, plus 6 years for accounting records |
| Payment details | Taken and held by Stripe, not by us. We see only limited details, such as the card brand and last 4 digits. | Contract; legal obligation (accounts) | 6 years for accounting records |
| SSIP pack intake: company details, staff names, roles, training cards, accident and RIDDOR records, documents you upload | To prepare and check your accreditation documents | Contract. Where accident records include health information about identifiable people, we rely on the employment and social protection condition and ask you to anonymise them wherever possible. | [PLACEHOLDER: e.g. 12 months after delivery], then deleted. The delivered documents stay with you. |
| Messages you send us | To reply and give support | Legitimate interests | 2 years |
| Basic server logs (IP address, pages requested) | Security and keeping the site running | Legitimate interests | As set by our host, usually days |
Who we share it with
- Vercel Inc. hosts the website.
- Resend sends our emails and stores the subscriber list.
- Stripe processes payments.
- GitHub stores our code, but not your data.
Some of these providers are in the USA. Transfers are protected by the UK–US data bridge and/or the UK International Data Transfer Addendum. We never sell your data. Any sponsor content in our emails is shown to you, but sponsors never receive your details.
Cookies
This website sets no cookies and uses no tracking analytics. Our emails may use open and click tracking to measure readership. [PLACEHOLDER: confirm or switch off tracking in Resend]. Stripe's checkout pages set their own cookies.
Your rights
You can ask us for a copy of your data, or ask us to correct it, delete it, restrict how we use it, object to us using it, or move it to another service. Email hello@thecontraflow.co.uk. If you're unhappy, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).