Legal

Privacy policy

AcoustaPLOT is a trading name of ACOUSTAPLOT LTD, registered in England and Wales (company number 17389299). We are the data controller for the personal data described here. We comply with the UK GDPR and the Data Protection Act 2018.

Registered office: 81 Howarth Road, Wimborne, BH21 2FG · Data protection contact: hello@acoustaplot.co.uk

The short version

We only collect what we need to run a noise assessment and deliver your report. We don't sell your data, and we don't share your address with anyone for their own marketing. We never see or store your card details — Stripe handles payment. You can ask us to delete your personal data at any time.

What we collect & why

When you check an address (before buying). We store the address (or map location) you entered and the screening result against a temporary record, so you can come back to it, pay for a fuller report against the same check, or get support if something goes wrong — the same 90-day retention as a paid order (see below). We do not currently track where you came from or an analytics session identifier for a free check; if you don't go on to buy anything, no name, email or payment detail is ever attached to the record.

When you buy a report. We keep an order record: your email, the property address, the report tier, the headline noise result, and the Stripe payment reference. Your report is not stored as a separate PDF file — it is generated from this order record whenever you (or we, for support) open your report link. This is the record we use to answer any support query.

Payment. Card payments are processed directly by Stripe. We never receive or store your card details — only a payment reference and confirmation of success. The checkout also asks for your email through Stripe's own "Link" field: this lets Stripe recognise you if you've saved payment details with Link before (at any merchant that uses it, not just us) and offer a faster one-click checkout. That recognition and any saved details are held by Stripe under its own privacy policy, separately from the order record described above — we only ever receive the email itself and the payment reference.

If you opt in to marketing (a separate, unticked box — never bundled into our terms), we keep your email and consent record, plus a hashed version of your IP as evidence of consent. You can withdraw at any time.

Analytics. With your cookie consent we use Google Analytics 4. Without consent, no analytics cookies are set. See our cookie policy.

If you take out a Trade Licence. We keep your company name, work email, the plan you hold, and the Stripe subscription reference, for as long as your subscription is active plus a reasonable period afterwards for accounting and dispute purposes.

Lawful bases

DataPurposeLawful basis
Free address checks (not yet purchased)Let you resume or upgrade your check; supportLegitimate interests
Order recordDeliver the report & receipt; support; disputesContract; legal obligation (tax)
Marketing email + consentSend updates you asked forConsent
Trade Licence account detailsProvide and bill your subscriptionContract
Analytics cookies (GA4)Measure & improve the siteConsent

How long we keep it

Order records, in the system that actually serves your report link: 90 days after your last activity on the order (for a straightforward purchase, that means 90 days after purchase; if you come back later to refine your result, the 90 days restarts from that visit, so an order stays available at least as long as we said, often longer). If you need your report or order details beyond that window: the confirmation email we send at purchase is your durable record of the contract itself (order reference, price, product and your cancellation rights), but it does not include the report's own figures — if you want to keep the actual noise-level results and recommendation, save or print your report from its link before the window above elapses, since we may not be able to retrieve it from our system afterwards. Free address checks you never purchase follow the same 90-day window. Trade Licence account details: for as long as your subscription is active plus a reasonable period afterwards. Marketing data: until you withdraw consent. Deletion runs automatically on a schedule.

Who we share it with

We use a few trusted providers who act on our instructions under contract. Where a provider is outside the UK, transfers are protected either by that provider's certification under the UK Extension to the EU-US Data Privacy Framework, or by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as applicable to that provider.

ProviderPurposeLocation
StripePayment processing; the email you enter at checkout is also checked against Stripe's own Link network (see "Payment" above)UK / EU / US (safeguards)
ResendEmailing your report & receiptUS (safeguards)
Vercel KV (Upstash Redis)Order & records database (90-day retention — see above)US / global edge (safeguards)
Google Analytics 4Site analytics (consent only)US (safeguards)
VercelWebsite hostingUS / global edge (safeguards)
postcodes.io (Ideal Postcodes)Look up a UK postcode you enter, for the free address check and mapUK
MapboxMap display; receives the map location you view or place a pin atUS (safeguards)

We do not sell your personal data and do not share your address with third parties for their own marketing.

Your rights

Please do not send us health or medical information. We never need it to answer a question about a noise report, and we do not ask for it. If you send it to us anyway, we will remove it from our records rather than keep it.

Complaining about how we handle your data. Use our data protection complaints form. We will acknowledge your complaint within 30 days and respond without undue delay, telling you the outcome. You can also complain to the ICO at any time — you do not have to come to us first.

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, port it, or withdraw consent. Email hello@acoustaplot.co.uk and we'll respond within one month. When you ask us to erase your data we remove your personal details and consent, and strip the personal fields from your order record (there is no separate report PDF to delete — your report is generated on demand from that record); anonymous aggregate statistics may remain. If you submit your report — including a Barrier Planning Report — to your local planning authority as part of a planning application, that authority will typically publish it, including your name and the property address, on its public planning register; that publication is outside our control and our erasure right does not extend to the copy the authority holds, so ask your council about its own retention and removal policy for submitted documents.

If something goes wrong

If we become aware of a personal data breach affecting your data, we will assess the risk to you without delay. Where the law requires it, we will notify the Information Commissioner's Office within 72 hours of becoming aware, and we will contact you directly if the breach is likely to result in a high risk to your rights and freedoms.

Complaints

Please contact us first so we can put things right. You can also complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.