Privacy policy

Last updated 26 September 2026

This notice explains how personal data is handled when you use Service Charge Guide or contact us by email.

Who handles your data

Dan Williams, operating Service Charge Guide, is the data controller. For privacy questions or rights requests, email [email protected].

What data is used and why

The site has no accounts, contact forms or uploads and does not retain case documents. The stage finder puts your current step in the page address. It may remain in browser history or be visible to someone you share the link with. “Start again” removes it from the current address, but does not erase browser history. Cloudflare processes limited technical request and security data, which may include an IP address, browser and device information, requested page, time and security events.

This processing is necessary for the legitimate interests of providing, securing and improving the site. Those interests are balanced against the site’s minimal-data design. There is no automated decision-making.

If you email us, Microsoft Outlook handles your email address, message and any attachments. We use this information to respond to enquiries, consider corrections and handle complaints or privacy requests. This is based on our legitimate interests in managing correspondence and keeping the guide accurate, or a legal obligation where we must respond to a rights request.

Analytics and cookies

Cloudflare Web Analytics measures aggregate page visits and performance. Cloudflare states that it does not collect or use visitors’ personal data, use cookies or local storage, fingerprint visitors, or track them across sites. Analytics does not log query strings, so the finder’s current step is excluded. These statements describe Web Analytics; hosting and security requests may still involve the technical data described above.

We also count successful requests for the published Word and Excel downloads using Cloudflare Workers Analytics Engine. The record contains the file, its template or example category, format, time and a broad source category (the tools page, another site page, or direct/external). This download dataset contains no IP addresses, visitor identifiers, full referrers, query strings or document contents. It uses no cookies or browser storage and cannot tell us whether you opened, edited or completed a downloaded file.

See Cloudflare’s Web Analytics description and data and retention FAQ. The site does not use advertising cookies. Cloudflare may use strictly necessary security cookies when required to protect the service. Blocking the analytics beacon does not affect access to the guide.

Who receives data and how long it is kept

Technical data is shared only with Cloudflare for hosting, security and analytics, or where disclosure is required by law. Cloudflare retains unsampled Web Analytics beacon data for seven days and provides analytics reporting for the previous six months. Download analytics records are stored for three months under Cloudflare’s Analytics Engine retention policy. Other technical records are kept only as long as needed for delivery, security and legal obligations.

Email correspondence is stored through Microsoft Outlook. There is no single retention period for all messages. We keep correspondence while it is needed to deal with the enquiry and relevant follow-up, keep a necessary record of decisions or responses, meet legal obligations or handle disputes. We review retained messages from time to time and delete those no longer needed for these purposes.

Microsoft describes its processing and international transfer safeguards in its Privacy Statement.

Cloudflare operates internationally and describes its transfer safeguards in its Data Processing Addendum and Privacy Policy. Official links you open are controlled by their respective services.

Your rights

Where data-protection law applies, you may ask for access, correction, deletion, restriction, portability or object to processing. Some rights depend on the circumstances. You may complain to the Information Commissioner’s Office or, where applicable, your local European data-protection authority.