Draft - not yet reviewed by a solicitor

Privacy notice

This notice describes how NoticeClear handles personal data. It is a draft. It is not a finished privacy notice and it has not been reviewed by a solicitor.

Controller

The controller is NoticeClear. The contact address is hello@noticeclear.co.uk.

What is stored

Account email, name, and the Google account id (the subject identifier) from Google sign-in. Case details. Uploaded notice images. Payment status, and the Stripe customer id and payment id. A card number is never stored, and card details are entered only on the payment provider hosted page.

Medical or Blue Badge files are special-category data. They are stored only with explicit consent, kept for a shorter time, and left out of extraction unless you separately agree to that step.

How long

These periods are draft figures and can be configured before launch. Case data is deleted 12 months after the case is closed. Tax and payment records are kept for 6 years for HMRC.

Processors

Stripe is the payment processor. Google is used for sign-in. Vercel hosts the site.

Lawful basis

Contract, for providing the letter you asked for. Legal obligation, for tax records. Consent, for non-essential cookies. Legitimate interests, for security logs. Special-category evidence needs a UK GDPR Article 9 condition. The draft uses explicit consent.

Your rights

You can ask for a copy, a correction, erasure, a restriction, or an objection, and you can ask for a portable file. You can complain to the Information Commissioner. Erasure and objections wait for a person to review them. Asking does not delete evidence by itself.

Cookies

The Google sign-in session cookie is an Auth.js JWT named authjs.session-token, or __Secure-authjs.session-token in production. It is httpOnly, SameSite=Lax, and Secure in production. It is strictly necessary for account access. The staff sign-in cookie is tc_token, or __Secure-tc_token in production. It is httpOnly, SameSite=Lax, and Secure in production. A first-party cookie, nc_cookie_consent, stores Accept or Reject. You can change that choice from Cookie settings in the footer.

This site does not load an analytics or advertising script before you choose. No analytics cookie is set on arrival. A tool added later may load only after Accept. Reject stores the refusal and loads nothing extra. Nothing on this page is pre-ticked.