Privacy Policy

1. Who We Are

Claim Builder ("we", "us", "our") operates the website at claimbuilder.co.uk. We are committed to protecting your personal information and your right to privacy.

2. Information We Collect

We collect information you provide directly to us, including:

• Name and email address when you register an account
• Property address and postcode for your claim
• Details of disrepair issues, contact history with your landlord, and evidence photos you upload
• Payment information processed securely via Stripe (we do not store card details)
• Communications you send to us

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our claim-building platform
• Generate your claim pack documents
• Process payments and send transaction confirmations
• Send you service-related emails and updates
• Respond to your enquiries and support requests
• Improve and personalise your experience
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — to provide the services you have requested
• Legitimate interests — to improve our platform and prevent fraud
• Legal obligation — where required by law
• Consent — where you have given explicit consent

5. Data Sharing

We do not sell your personal data. We may share your information with trusted third-party service providers who assist us in operating our platform, including:

• Supabase — secure database and file storage
• Stripe — payment processing
• Email delivery providers for transactional emails

All third parties are contractually required to keep your data secure and use it only for the purposes we specify.

6. Data Retention

• We retain personal data only as long as necessary to provide our services.
• Uploaded documents, generated reports, and claim data may be retained for up to 12 months.
• We periodically review and delete older data where it is no longer required, unless retention is necessary for legal, regulatory, accounting, or dispute-resolution purposes.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability — receive your data in a structured format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at the details below.

8. Data Deletion Requests

9. Cookies

We use essential cookies to operate our platform (e.g. session management). We do not use advertising or tracking cookies. You can control cookies through your browser settings.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is encrypted in transit using TLS.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: