Privacy

Who we are

Chaseable is run by TidyStack. TidyStack decides how your information is used, which makes us its “controller” under UK data protection law. You can reach us at admin@chaseable.net.

What we keep

If you only look things up

Looking up a postcode doesn't need an account. We count how many lookups each council gets, but don't keep the postcode or who looked it up, except that a postcode in an area we don't cover yet is kept (not who looked it up) so we know where to add next. To stop the site being overloaded, we count lookups by internet (IP) address for a short time; that count is held in memory, not stored.

If you open an account

• Your name, and your company name if you give one.
• Your company's address, or your home address if you don't give a company name.
• The email address and mobile number you sign up with or add later.
• How you found Chaseable, which we ask when you sign up, and if one of our team phoned you, which one.
• Your password, stored scrambled (hashed) so that nobody, including us, can read it.
• The jobs you save on My permits: the site postcode and address, dates, licence fee, status and any notes.
• Whether email and text reminders are on, and a record of which reminders we've sent you and when.
• Anything you tell us about a council when you save a job (the fee you paid, the notice or processing time, a note), which we use to check and correct our council information.
• A record of each device you're signed in on, including the browser description your browser sends, so we can sign you out everywhere when you change your password. You can see these, and sign any of them out, on the Account page.
• If you invite a colleague: their email address or mobile number, so we can send them the link, and who sent the invitation.

The 6-digit codes we send to check an email address or mobile number, or to reset a password, are stored scrambled and stop working after 10 minutes. A sign-up that's never finished is deleted after 24 hours.

Why we use it

• To run your account: signing you in, keeping your saved jobs, sending the codes that check your email and mobile, sending the invitations you ask us to send, and emailing you when your password, email address or mobile number changes. We need this to provide our service for you.
• To send reminders, only if you turn them on. You can turn them off at any time on My permits, or with the link in any reminder email.
• To keep the site safe and working: stopping abuse and finding/fixing faults. This is in our legitimate interests and yours.
• To keep council information right, using what account holders tell us about councils, and to see which councils our service is used for, from saved jobs (including the fees and dates in them) and account addresses. This is in our legitimate interests.
• To see how firms hear about us, from your answer to “How did you find Chaseable?”, so we know which ways of reaching firms work and can count the sign-ups each of our callers brings in. This is in our legitimate interests.

We don't sell your information, and we don't send you marketing emails or texts without asking first.

Who else sees it

Everyone on your company's account can see the company's saved jobs, and each other's names and email addresses or mobile numbers.

These companies handle information for us, only to provide the service and only on our instructions:

• Neon stores our database, in London.
• Resend sends our emails.
• Twilio sends our text messages.
• Our website hosting provider runs the servers the site is served from.

When you look up a postcode, we send the postcode (and nothing about you) to GOV.UK and postcodes.io to find out which council covers it.

Resend and Twilio are based in the United States and may handle your email address or mobile number there. When that happens it's protected by safeguards UK law approves, such as the UK-US data bridge or the UK International Data Transfer Addendum.

We'll also share information if the law requires it, or with a buyer if TidyStack or Chaseable is sold, in which case this notice would still apply to it.

How long we keep it

We keep your account information until you delete your account. You can do that yourself at any time on the Account page. It deletes your details, your sessions, your reminder history and what you've told us about councils. If you're the last person on your company's account, your company and its saved jobs are deleted too. Copies in our database backups are overwritten as the backups roll over.

Being signed in on a device lasts up to 30 days unless you sign out. Codes last 10 minutes, unfinished sign-ups 24 hours, and invitations that aren't used 7 days. If a company's owner removes you from its account, your details are deleted in the same way.

Cookies

We only set cookies once you sign in, and only to keep you signed in:

• access_token: proves you're signed in. The pass inside it is renewed every 15 minutes while you use the site; the cookie lasts up to 30 days.
• refresh_token: renews that pass, so you stay signed in between visits. Lasts up to 30 days.
• signed_in: tells the site you're signed in, so pages only check your account when there is one. It holds no details about you and lasts up to 30 days.

All three are deleted when you sign out. Our own team also gets a desk_unlock cookie, for 12 hours, when they open the data desk.

Your browser also remembers two things for us: that you've signed in on it, so the Sign in page can explain if your session has run out; and, if you try to save a job before signing in, that job until you close the tab, so it can be saved once you have. Because all of these are needed for the site to work, the law doesn't require us to ask first.

We don't use analytics or advertising cookies. If we ever add adverts or tools that use them, we'll ask you before any are set.

Your rights

You can ask us to:

• give you a copy of the information we hold about you
• correct anything that's wrong
• delete it (or delete your account yourself, as above)
• stop or limit how we use it, or send it to you in a form another service can use

Reach us at admin@chaseable.net and we'll reply within 3 working days. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Who Chaseable is for

Chaseable is for businesses, and isn't meant for anyone under 18.

Changes to this notice

When we change this notice we'll update the date at the top. If a change affects how we use information you've already given us, we'll tell account holders by email or text first.