Privacy Policy

What Data We Collect

Account data: when you sign up, we collect your name, email address, and password, which is stored in encrypted form.

Usage data: we log the searches you run, reports you generate, and entities you monitor. This is necessary to provide the service.

Payment data: payments are processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment processing.

Technical data: we collect standard technical information including IP address, browser type, and device information for security and service improvement purposes.

How We Use Your Data

We use your data to provide and operate BizRisk, send account-related emails, improve the platform, and meet legal or compliance obligations.

• Provide and operate the BizRisk service
• Send confirmations, alerts, and support responses
• Improve and maintain the platform
• Meet legal and compliance obligations

We do not sell your data to third parties. We do not use your data for advertising.

Data Sources We Query

When you run a report, BizRisk queries public data sources on your behalf. The subjects of those reports, including companies, directors, and domains, are not users of BizRisk and their data is handled in accordance with applicable data protection law.

Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days unless we are required to retain it by law.

Your Rights

Under GDPR you have the right to access, correct, delete, restrict, or move the personal data we hold about you.

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability

To exercise any of these rights, contact us at support@bizrisk.uk.

Cookies

We use strictly necessary cookies and similar technologies to keep BizRisk secure and working properly. These are used across the site, including the authenticated application, for things like login, session handling, and security. These cookies are essential and do not require consent under Irish and UK ePrivacy rules.

On our public marketing pages only, we use Google Analytics (GA4) to understand how visitors use the site and to improve the product. Google Analytics is not loaded within the authenticated application. Analytics cookies are only set after you choose Accept in the cookie banner. If you choose Reject, analytics cookies stay off and you can still use the site fully.

Google Analytics helps us understand general usage patterns such as which pages are visited, how visitors arrive at the site, approximate region or location information, and the type of device or browser being used. It also helps us see referral sources, such as whether someone came from a search engine or another website.

We store your cookie consent choice for 6 months. After that, we ask again.

Third-Party Services

We use third-party services to operate BizRisk.

• Stripe for payment processing
• Supabase for database and authentication
• Vercel for hosting
• Resend for transactional email

Each provider has its own privacy policy governing its handling of data.

Security

We take reasonable technical and organisational measures to protect your data. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by a notice on the platform.

Contact

If you have any questions about this policy, contact us at support@bizrisk.uk.