Legal

Privacy Policy

Last updated: 10 July 2026

PlanWatch ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and what we do with it.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We keep things simple — we collect as little as possible and never sell your data.

This policy is a product disclosure and requires review by a qualified UK privacy professional. It describes the current implementation, including analytics that are not yet consent-gated; it does not claim that a consent-management system is implemented.

admin_panel_settings

Data Controller

PlanWatch is the data controller responsible for your personal data.
Contact: hello@planwatch.co.uk

folder_open

What We Collect

We only collect what's necessary to provide the service:

email

Email address

Required

Used for your account and, if you choose a paid plan, to deliver instant alerts for monitored postcodes. Free accounts do not include ongoing email alerts.

pin_drop

Postcode

Required

Used to determine which planning applications are relevant to you. Your postcode is sent to the postcodes.io API (a free, public service) to convert it to geographic coordinates — no other personal data is shared with this service.

person

Name

Optional

If provided, used only to personalise your alert emails. You can leave this blank.

Other technical data: We may process device, browser, referrer, event, pseudonymous visitor/session identifier and IP-derived data for security, attribution and first-party analytics. Postcode-search analytics store a hashed IP value rather than the raw IP for visitor counting. We do not store card details on our own systems.

help_outline

Why We Collect It

Data Purpose Legal Basis
Email Sending planning alerts Account service
Postcode Finding nearby planning applications Account service
Name Personalising emails (optional) Account service
Technical analytics Security, attribution, usage measurement and conversion reporting Review required

The appropriate legal basis depends on the processing: account and paid-alert delivery are needed to provide the service; security and operational records may rely on legitimate interests; analytics and advertising tags may require consent under applicable UK rules. Consent gating for analytics and advertising is not currently implemented, so this basis and the associated controls require qualified UK review before this policy is treated as final. Contact us if you want to object, withdraw a permission, or ask about a particular processing activity.

storage

Where We Store Your Data

Your account and application data are stored in a SQLite database on an Oracle-hosted server. Oracle provides the hosting environment used by PlanWatch. Some providers may process data outside the UK, subject to their own terms and the safeguards applicable to the transfer.

We use reasonable technical measures to protect your data, including encrypted connections (HTTPS) and restricted server access.

share

Who We Share Data With

We do not sell or rent your personal data. We use service providers where needed to operate PlanWatch, including Oracle for hosting, Stripe for payment checkout and subscription billing, an email-delivery provider for paid service emails, Google Analytics 4 for product analytics, Microsoft Clarity for session/interaction analytics, and Meta Pixel/Conversions API for advertising measurement where configured.

Google Analytics 4, Microsoft Clarity and Meta may receive page views, device/browser information, approximate source/referrer, interaction events, pseudonymous identifiers and advertising identifiers. First-party analytics stores visitor and session identifiers in browser storage and sends event data to PlanWatch. Meta's server-side Conversions API can receive a client IP address and user agent for matching; identifiers such as email, postcode and external IDs are hashed before being sent where Meta's protocol requires hashing. Stripe receives the payment and billing information you enter into its checkout; PlanWatch does not store full card details.

postcodes.io: When you search a postcode, we send that postcode (and only the postcode) to the postcodes.io API to get geographic coordinates. No personal data is sent to this service.

cookie

Cookies

We use Google Analytics 4, Microsoft Clarity, Meta Pixel/Conversions API when configured, and first-party analytics to understand how people find and use PlanWatch. These tools are loaded in the current implementation without a consent-management gate; that gap is disclosed here and requires qualified UK review.

First-party analytics may store a pseudonymous visitor ID in local storage and a session ID in session storage so we can measure traffic sources, scroll depth, CTA clicks, form submissions, outbound clicks and conversion events. Form fields such as email and postcode are excluded from the client analytics properties where the implementation supports that filtering. Server-side postcode-search logs may retain the searched postcode, radius, result count, referrer, user agent and a hashed IP for reporting and abuse prevention.

schedule

How Long We Keep Your Data

check_circle

Active accounts: We keep account, saved-postcode and paid-alert data while needed to provide the service and meet legal or billing obligations.

check_circle

After cancellation or unsubscribe: We stop the relevant email activity and retain only what is needed for suppression, billing, security or legal obligations before deletion or anonymisation.

check_circle

Deletion requests: If you ask us to delete your data, we will do so within 30 days.

check_circle

Search-only users: Searches may create operational and first-party analytics records, including the searched postcode and hashed IP-derived data. We do not treat a search as an ongoing email subscription.

gavel

Your Rights

Under the UK GDPR, you have the following rights. To exercise any of them, email us at hello@planwatch.co.uk.

visibility

Right of Access

Request a copy of all personal data we hold about you.

edit

Right to Rectification

Ask us to correct any inaccurate data we hold about you.

delete

Right to Erasure

Ask us to delete all your personal data. We'll do it within 30 days.

download

Right to Data Portability

Receive your data in a structured, machine-readable format (JSON or CSV).

block

Right to Restrict Processing

Ask us to temporarily stop processing your data while we resolve a concern.

cancel

Right to Withdraw Consent

Withdraw consent at any time by unsubscribing or emailing us. This won't affect prior processing.

We aim to respond to all requests within 30 days. There is no fee for exercising your rights.

child_care

Children's Privacy

PlanWatch is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

support_agent

Complaints

If you're unhappy with how we handle your data, please contact us first at hello@planwatch.co.uk and we'll do our best to resolve it.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

update

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we'll notify subscribers by email. The "Last updated" date at the top of this page will always reflect the latest version.

mail

Questions?

If you have any questions about this privacy policy or your data, get in touch.

email hello@planwatch.co.uk