Privacy Policy

Broadhurst Digital Limited (Company No. 12503471) operates planningconstraints.com and is the data controller for personal data described here. Contact: planningconstraints@broadhurst.digital.

Searches. When you search, we log the coordinates, postcode (if entered), result count, referrer and browser user-agent. This is product analytics — searches are not linked to an account or identity (we have none). Legal basis: legitimate interests (improving the Service).

Purchases. When you buy a Site Report Pass or Pro, our payment provider Stripe collects your payment details; we never see card numbers. We store your email address, licence key, plan, Stripe customer/subscription identifiers and (for Site Passes) the purchased location, to deliver and support what you bought. Legal basis: performance of a contract.

Land-ownership features.Where you use features built on HM Land Registry corporate-ownership data (CCOD/OCOD), HM Land Registry's licence requires us to keep a record of end users — the contact details you provide when you purchase (such as your email address) and technical logs such as IP address — and we may have to disclose those records to HM Land Registry if it audits our use of the data. Legal basis: legitimate interests (meeting the conditions of our HM Land Registry data licence and demonstrating compliance with it). We keep these records for as long as that licence requires.

Enquiries and founding-member requests. If you submit a form we store what you give us (email, name, role, company, message) to respond and follow up. Legal basis: legitimate interests / pre-contract steps.

Cookies and analytics. A strictly functional cookie records paid access on your device. A second strictly-necessary signed cookie (pc_vid) holds a random identifier used only to enforce free-tier daily search limits on this device — it carries no personal data, is never used for cross-site tracking or advertising, and expires after 1 year. Google Tag Manager loads on every visit, but only activates analytics tags — Microsoft Clarity (session analytics) among them — after you accept the cookie banner; no analytics data is collected before that. Legal basis: consent.

Service providers acting as processors: Stripe (payments), Vercel (hosting), Neon (database), Microsoft Clarity and Google (analytics, consent-based), and Emailit, our transactional email provider. If you submit an enquiry or founding-member request, those details are also forwarded to an external CRM/automation webhook (e.g. Zapier, Make or HubSpot) so we can follow up. We do not sell personal data. Some providers process data outside the UK/EEA under appropriate safeguards (e.g. UK IDTA / EU SCCs).

Purchase records are kept while your licence is active and for up to 6 years afterwards (tax and accounting). Leads are kept for up to 2 years after last contact. Anonymous search logs are kept for product analytics. Consent-based analytics retention is governed by the providers' documented periods.

Under UK GDPR you can request access to, correction or deletion of your personal data, object to or restrict processing, withdraw consent (e.g. decline cookies), and request portability. Email us and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).