Privacy Policy

EntitledUK (“we”, “us”, “our”) operates the website entitleduk.co.uk. We provide a council tax band-checking service and sell evidence packs to help UK residents challenge their council tax band with the Valuation Office Agency (VOA).

We are the data controller for the personal information we collect. If you have questions about this policy, email us via the contact page.

We collect only what we need to provide the service:

• Email address — to deliver your evidence pack and send the free summary you request. Legal basis: contract performance and legitimate interests.
• Postcode — to look up council tax band data from the public VOA register. Legal basis: contract performance.
• Property address and council tax band — to personalise your evidence pack. Legal basis: contract performance.
• Comparable property data — addresses and bands of neighbouring properties you selected, drawn from the public VOA register. Legal basis: contract performance.
• Payment information — processed directly by Stripe. We do not store your card details. We receive a Stripe customer ID and confirmation of payment. Legal basis: contract performance.

We store the above in a leads table in our database (Supabase). We do not collect your name, phone number, or any special category data.

We do not currently use tracking cookies or third-party analytics. If this changes, this policy will be updated before any tracking is enabled.

We share data with the following third-party services to operate the platform:

Where sub-processors are based outside the UK, we rely on Standard Contractual Clauses or equivalent transfer mechanisms under UK GDPR.

We keep lead records (email, postcode, property address, band, comparables) for 24 months from the date of collection. After that, records are deleted automatically.

Stripe retains payment records in accordance with their own retention policy and applicable financial regulations.

You can request deletion of your data at any time — see “Your rights” below.

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, contact us via the contact page. We will respond within one calendar month.

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

We use industry-standard security measures including encrypted connections (HTTPS), access-controlled databases, and we do not store payment card data. Despite these measures, no system is perfectly secure — if you have concerns, contact us immediately.

We will post any changes to this page and update the date at the top. Material changes will be notified by email where we hold your address.

This policy is governed by the laws of England and Wales. Disputes are subject to the exclusive jurisdiction of the courts of England and Wales.