Privacy Policy

This policy explains how InfraValue (“we”, “us”), a UK sole trader, handles personal data when you use our platform. We are the data controller for the personal data described here. We are committed to handling your data in line with the UK GDPR and the Data Protection Act 2018.

1. Data we collect

• Account data — your email address, authentication details, and subscription tier.
• Billing data — handled by our payment processor, Stripe. We store a Stripe customer reference and subscription status, not your full card details.
• Usage data — watchlists, tracked assets, preferences, and basic technical logs needed to run and secure the service.
• Feedback — anything you choose to send us through the feedback form, including an optional contact email.

Separately, the platform displays information about companies and assets drawn from public registers. This includes the names, roles, and appointment or cessation dates of company directors and persons of significant control, as published in the Companies House register, shown on paid asset pages. We process this personal data on the basis of legitimate interests — it is already public by statute and is central to corporate-ownership screening. We suppress residential addresses and full dates of birth. Individuals can contact us about this processing at info@infravalue.co.uk; corrections to the register itself must be made at Companies House.

2. How and why we use it

• To provide the platform and your subscription — performance of our contract with you.
• To take payment and prevent fraud — contract and legitimate interests.
• To secure, maintain, and improve the service — legitimate interests.
• To display public-register information for screening — legitimate interests, given the data is already lawfully in the public domain by statute.
• To respond to your feedback or enquiries — legitimate interests.

3. Who we share it with

We use a small number of processors to run the platform: Supabase (database and authentication hosting), Vercel (application hosting), and Stripe (payments). Where we add email delivery, we will use a reputable provider under a data-processing agreement. We do not sell your personal data. We may disclose data where required by law.

4. International transfers

Our infrastructure is configured to host data in the UK or European Economic Area where available. Where a processor transfers data outside the UK/EEA, that transfer is covered by an adequacy decision or appropriate safeguards such as the International Data Transfer Agreement or Standard Contractual Clauses.

5. Retention

We keep account data for as long as your account is active and for a short period afterwards to handle deletion and backups. Billing records are kept for as long as required by UK tax law. Technical logs are kept for a limited period for security and troubleshooting. Feedback is kept for as long as it remains useful to product development.

6. Your rights

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability, subject to legal limits. To exercise any of these, email info@infravalue.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we ask that you contact us first so we can try to resolve the matter.

Note that we cannot alter or delete information held in the underlying public registers themselves — those are maintained by the relevant public bodies, and requests about that data should be directed to them.

7. Cookies

We use only the cookies and similar storage strictly necessary to keep you signed in and to operate the platform securely. We do not use advertising cookies.

8. Changes

We may update this policy and will post the revised version with a new “last updated” date. Material changes affecting how we use your personal data will be notified to subscribers.

9. Contact

Data protection enquiries: info@infravalue.co.uk.