Privacy Policy · CompaniesIQ

Who we are

CompaniesIQ Ltd (“CompaniesIQ”, “we”) is the data controller for personal data processed through this site. Company no. 14820317, London, United Kingdom. Contact: privacy@companiesiq.co.uk.

Company register data

The company information we display originates from the UK public register (Companies House) and official statistics (ONS, Nomis), reused under the Open Government Licence. This is public-record data, not data we collect from you. See sources & methodology.

Business contact details published on company websites

Our contact-intelligence feature fetches a company's own website and records the general contact details the company has chosen to publish there — typically a business email such as hello@ or info@ and a business telephone number — together with the page each one came from and the date we read it. We do not buy, licence or import contact data from third-party contact databases, and we do not attempt to derive or guess an individual's email address.

Lawful basis — legitimate interests (Art. 6(1)(f)): re-presenting business contact information that the business itself published for the purpose of being contacted, with its provenance attached. We have balanced this against the rights of the individuals concerned, which is why we limit collection to what is published on the company's own site, show the evidence for every value, and operate the objection route below.
Crawling — we identify ourselves as CompaniesIQBot and obey robots.txt. See about our crawler.
Sole traders and small companies — a business number or address can also be personal data. Where that is the case, the rights below apply to it in full.
Retention — a record is re-checked or expires within 30 days; a suppressed value is recorded permanently as suppressed so that it is never re-published.

Objecting (Art. 21). If you do not want a detail shown, email privacy@companiesiq.co.uk or use the removal form on the crawler page. We do not require you to create an account first, and we act on the request rather than asking you to justify it.

Marketing to these details is your responsibility. If you contact a company using details found here, you are the controller for that outreach and must comply with UK GDPR and PECR — including the rules on electronic marketing, the Corporate Telephone Preference Service (CTPS) and the Telephone Preference Service (TPS). We do not screen numbers against TPS/CTPS on your behalf.

Data we collect about you

Account — your email address, when you sign in via magic link (processed by our auth provider, Supabase).
Billing — if you subscribe, payment is processed by Stripe; we store your subscription status and Stripe customer reference, never your card details.
Enquiries / lead forms — the name, email and phone you submit through a report or visibility-review form.
Analytics — privacy-conscious usage data via Google Analytics 4 (no entity-identifier pages, query strings stripped).
Product usage (signed-in accounts) — how you use CompaniesIQ, such as the searches you run, plan pages you view and checkout steps, plus how the visit in which you signed up began (the first page, the referring website and any campaign tags). It is kept in your browser’s session storage until you sign up and never stored for visitors who don’t create an account. We use it to improve the product and to send relevant service emails, which you can unsubscribe from at any time.

Lawful bases

We process account and billing data to perform our contract with you; enquiry data on the basis of your consent / our legitimate interest in responding; and analytics on the basis of legitimate interest in improving the service.

Sharing & processors

We use trusted processors — Supabase (auth & database), Stripe (payments), Resend (email), Vercel (hosting) and Google (analytics). We do not sell your personal data.

Your rights

Under UK GDPR you can request access, correction, deletion, restriction or portability of your data, and object to processing. Email privacy@companiesiq.co.uk. You may also complain to the ICO (ico.org.uk).

Retention

We keep account and billing records for as long as your account is active and as required by law, and remove enquiry data when it is no longer needed.

This policy is provided in good faith and should be reviewed by your legal adviser before launch.