Privacy Policy

1. Introduction

Bradshaw Pearson ("we", "us", "our") is committed to protecting your privacy and complying with data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This privacy policy explains how we collect, use, store, and protect your personal information when you use our website and services.

2. Contact Information

Data Controller: Bradshaw Pearson

Data Protection Email: takedown@bradshawpearson.com

3. Information We Collect

3.1 Account Information

• Email address (for authentication)
• Name (first and last name)
• Password (securely hashed)
• Account role and status
• Login and activity timestamps

3.2 Service Usage Data

• Phone numbers submitted for searches (temporarily stored for processing)
• Search parameters and results metadata
• Tool usage logs and timestamps
• IP addresses and user agent information

3.3 Technical Information

• Session data for security and functionality
• Security logs and audit trails
• Error logs and system diagnostics

4. How We Use Your Information

4.1 Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To provide our investigative and telephone checking services
• Legitimate Interests: For security, fraud prevention, and service improvement
• Legal Obligation: To comply with legal and regulatory requirements
• Consent: Where explicitly provided for specific processing activities

4.2 Purposes of Processing

• Providing access to our telephone number checking tools
• User authentication and account management
• Service security and fraud prevention
• Audit logging for compliance and investigation purposes
• Communication regarding your account or our services
• Legal compliance and regulatory reporting

5. Data Sharing and Third Parties

5.1 Search Engine APIs

When you use our telephone number checking service, we may query:

• Google Custom Search API
• Microsoft Bing Web Search API

These services process search queries according to their own privacy policies. We do not share personal account information with these services.

5.2 No Other Sharing

We do not sell, rent, or share your personal information with third parties except:

• When required by law or legal process
• To protect our rights, property, or safety
• With your explicit consent

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Until account deletion or 2 years after last login
• Search Logs: 6 months maximum (automatically deleted)
• Audit Logs: 1 year maximum for security and compliance
• Session Data: Automatically deleted when sessions expire
• Saved Evidence: Only when explicitly saved by users, retained until user deletion

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Secure encrypted connections (HTTPS/TLS)
• Strong password hashing (Argon2ID)
• Two-factor authentication for administrators
• Regular security monitoring and audit logging
• Access controls and role-based permissions
• Secure session management
• Regular security updates and patches

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at takedown@bradshawpearson.com

9. Cookies and Tracking

9.1 Essential Cookies

We use strictly necessary cookies for:

• User authentication and session management
• Security protection (CSRF tokens)
• Cookie consent preferences

9.2 Cookie Details

9.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may prevent proper functioning of our services.

10. International Transfers

Your personal data is processed within the UK. Any use of third-party APIs (Google, Microsoft) may involve international transfers governed by their respective privacy policies and adequate safeguards.

11. Children's Privacy

Our services are intended for business and professional use. We do not knowingly collect personal data from individuals under 18 years of age.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last modified" date. Continued use of our services after changes constitutes acceptance of the revised policy.

13. Complaints

If you have concerns about our data processing, you can:

• Contact us directly at takedown@bradshawpearson.com
• Lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk

14. Data Takedown Requests

If you find your personal information in our search results and wish to have it removed, please contact us at takedown@bradshawpearson.com with:

• The specific URL or search result
• Your relationship to the data
• Reason for removal request

We will review and respond to legitimate takedown requests promptly.