Privacy notice
Last updated: 1 September 2026
The short version. We run a business-information service built on the public Companies House register. We don't run ad trackers, we don't sell personal data, and we don't supply directors' personal contact details to anyone. What we hold about you personally is the minimum needed to answer your emails and run your subscription.
Who we are
IncorpAlert provides filtered, enriched alerts about newly incorporated UK companies, built from public Companies House data. IncorpAlert is the data controller for the processing described in this notice. Contact for anything here: hello@incorpalert.co.uk.
When you visit this website
This site sets no marketing or analytics cookies of our own. It is served through Cloudflare, which processes technical data (such as your IP address) in server logs to deliver and protect the site.
When you email us or request a sample
We receive whatever you send — typically your name, email address, business type, and area. We use it to reply and to deliver what you asked for, on the lawful basis of taking steps you've requested. If you asked for a sample and don't become a customer, we delete the correspondence within 12 months.
When you subscribe
Payments are handled by Stripe; your card details go to Stripe directly and never touch our systems. We hold your name, email, chosen preferences (sector, area), and subscription history for as long as you're a customer and for up to 6 years afterwards where tax and accounting law requires it. Lawful basis: performing our contract with you.
The register data inside our product
Our product is built from the public Companies House register, which includes some personal data — most notably company officers' names and registered addresses, published by law. We process this on the lawful basis of legitimate interests: providing business-information services from open public-register data, in a way registrants reasonably expect given the register's statutory openness. A balancing assessment is on file. Three commitments:
- We do not sell, supply, or encourage the use of directors' personal contact details.
- Our enrichment classifies companies (for example, whether a company shows signs of trading); we make no automated decisions producing legal or similarly significant effects about individuals.
- Register extracts are refreshed continuously and retained for up to 24 months for accuracy and history, then deleted or anonymised.
Who we share data with
Only service providers acting on our instructions: Stripe (payments), Google Workspace (email), Cloudflare (hosting and DNS), and automated analysis tools used in classifying company records. Some providers may process data outside the UK under UK-approved safeguards such as adequacy decisions or the international data transfer agreement. We never sell personal data.
Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, or object to our processing — including asking us to remove you, as a company officer, from our alert outputs. Email hello@incorpalert.co.uk; we respond within one month. If you're unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this notice changes materially we'll say so on this page, and email subscribers where the change affects them.