Privacy notice
How the planned private alpha will use account information, watchlist choices, and public company records.
Draft status — 16 July 2026. No live accounts currently transmit personal data. The legal operator, contact address, processor details, and final retention periods must be completed before public signup or outreach.
Information we expect to process
- Account email, authentication identifier, plan, and account status.
- Companies you choose to watch, optional labels, tags, and broad exposure bands.
- Normalized public company facts, snapshots, and deterministic signals sourced from Companies House.
- Alert delivery state, security events, audit records, and service-health information.
- Billing customer and subscription identifiers only after paid plans launch; card details remain with the payment provider.
We do not intend to collect special-category data, personal credit scores, card details, or private information about monitored-company officers.
Why we use information
Provide the requested service
To authenticate an account, maintain its watchlist, check selected public records, display changes, and deliver requested alerts.
Legitimate operational interests
To prevent abuse, diagnose failures, protect accounts, understand aggregate activation, and keep a minimal audit trail. These uses will be balanced against individual rights.
Legal obligations
To keep records or respond where applicable law requires it. Marketing or outreach will not begin until the legal basis, sender identity, suppression process, and notices are complete.
Retention and deletion
Account information will be kept while an account is active. Login records, delivery events, raw error details, and deleted-account data will use defined retention periods before launch. A deletion request will stop ordinary processing and remove user-owned watchlist data, subject to security, suppression, and legal-record exceptions.
Public company snapshots may be shared across watchlists to avoid repeated official API calls. Orphaned records will be removed under a documented retention job rather than retained indefinitely.
Your rights
Depending on the circumstances, UK data-protection law can provide rights to access, correct, erase, restrict, object, and obtain a portable copy of personal information. You may also complain to the UK Information Commissioner's Office.
The private alpha must include self-service export and account-deletion paths before public signup.
Contact and controller identity
Receivable Radar is the working product name and Morrowfield Works is the intended trading identity. The legal controller name, postal address, and monitored privacy email are not yet published. They are release blockers, not optional placeholders.