Privacy Policy
Last updated: 10 July 2026
PlanWatch ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and what we do with it.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We keep things simple — we collect as little as possible and never sell your data.
This policy is a product disclosure and requires review by a qualified UK privacy professional. It describes the current implementation, including analytics that are not yet consent-gated; it does not claim that a consent-management system is implemented.
Data Controller
PlanWatch is the data controller responsible for your personal data.
Contact: hello@planwatch.co.uk
What We Collect
We only collect what's necessary to provide the service:
Email address
RequiredUsed for your account and, if you choose a paid plan, to deliver instant alerts for monitored postcodes. Free accounts do not include ongoing email alerts.
Postcode
RequiredUsed to determine which planning applications are relevant to you. Your postcode is sent to the postcodes.io API (a free, public service) to convert it to geographic coordinates — no other personal data is shared with this service.
Name
OptionalIf provided, used only to personalise your alert emails. You can leave this blank.
Other technical data: We may process device, browser, referrer, event, pseudonymous visitor/session identifier and IP-derived data for security, attribution and first-party analytics. Postcode-search analytics store a hashed IP value rather than the raw IP for visitor counting. We do not store card details on our own systems.
Why We Collect It
| Data | Purpose | Legal Basis |
|---|---|---|
| Sending planning alerts | Account service | |
| Postcode | Finding nearby planning applications | Account service |
| Name | Personalising emails (optional) | Account service |
| Technical analytics | Security, attribution, usage measurement and conversion reporting | Review required |
The appropriate legal basis depends on the processing: account and paid-alert delivery are needed to provide the service; security and operational records may rely on legitimate interests; analytics and advertising tags may require consent under applicable UK rules. Consent gating for analytics and advertising is not currently implemented, so this basis and the associated controls require qualified UK review before this policy is treated as final. Contact us if you want to object, withdraw a permission, or ask about a particular processing activity.
Where We Store Your Data
Your account and application data are stored in a SQLite database on an Oracle-hosted server. Oracle provides the hosting environment used by PlanWatch. Some providers may process data outside the UK, subject to their own terms and the safeguards applicable to the transfer.
We use reasonable technical measures to protect your data, including encrypted connections (HTTPS) and restricted server access.
Who We Share Data With
We do not sell or rent your personal data. We use service providers where needed to operate PlanWatch, including Oracle for hosting, Stripe for payment checkout and subscription billing, an email-delivery provider for paid service emails, Google Analytics 4 for product analytics, Microsoft Clarity for session/interaction analytics, and Meta Pixel/Conversions API for advertising measurement where configured.
Google Analytics 4, Microsoft Clarity and Meta may receive page views, device/browser information, approximate source/referrer, interaction events, pseudonymous identifiers and advertising identifiers. First-party analytics stores visitor and session identifiers in browser storage and sends event data to PlanWatch. Meta's server-side Conversions API can receive a client IP address and user agent for matching; identifiers such as email, postcode and external IDs are hashed before being sent where Meta's protocol requires hashing. Stripe receives the payment and billing information you enter into its checkout; PlanWatch does not store full card details.
postcodes.io: When you search a postcode, we send that postcode (and only the postcode) to the postcodes.io API to get geographic coordinates. No personal data is sent to this service.
Cookies
We use Google Analytics 4, Microsoft Clarity, Meta Pixel/Conversions API when configured, and first-party analytics to understand how people find and use PlanWatch. These tools are loaded in the current implementation without a consent-management gate; that gap is disclosed here and requires qualified UK review.
First-party analytics may store a pseudonymous visitor ID in local storage and a session ID in session storage so we can measure traffic sources, scroll depth, CTA clicks, form submissions, outbound clicks and conversion events. Form fields such as email and postcode are excluded from the client analytics properties where the implementation supports that filtering. Server-side postcode-search logs may retain the searched postcode, radius, result count, referrer, user agent and a hashed IP for reporting and abuse prevention.
How Long We Keep Your Data
Active accounts: We keep account, saved-postcode and paid-alert data while needed to provide the service and meet legal or billing obligations.
After cancellation or unsubscribe: We stop the relevant email activity and retain only what is needed for suppression, billing, security or legal obligations before deletion or anonymisation.
Deletion requests: If you ask us to delete your data, we will do so within 30 days.
Search-only users: Searches may create operational and first-party analytics records, including the searched postcode and hashed IP-derived data. We do not treat a search as an ongoing email subscription.
Your Rights
Under the UK GDPR, you have the following rights. To exercise any of them, email us at hello@planwatch.co.uk.
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Ask us to correct any inaccurate data we hold about you.
Right to Erasure
Ask us to delete all your personal data. We'll do it within 30 days.
Right to Data Portability
Receive your data in a structured, machine-readable format (JSON or CSV).
Right to Restrict Processing
Ask us to temporarily stop processing your data while we resolve a concern.
Right to Withdraw Consent
Withdraw consent at any time by unsubscribing or emailing us. This won't affect prior processing.
We aim to respond to all requests within 30 days. There is no fee for exercising your rights.
Children's Privacy
PlanWatch is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Complaints
If you're unhappy with how we handle your data, please contact us first at hello@planwatch.co.uk and we'll do our best to resolve it.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
Changes to This Policy
We may update this policy from time to time. If we make significant changes, we'll notify subscribers by email. The "Last updated" date at the top of this page will always reflect the latest version.
Questions?
If you have any questions about this privacy policy or your data, get in touch.
hello@planwatch.co.uk