Privacy and cookies

Who we are

The data controller is SCC Nexus Limited, registered in England and Wales, company number 17458303, registered office 49 Station Road, Polegate, East Sussex, BN26 6EA. Contact us about privacy using our secure contact form.

ICO registration number: 00015734923.

Postcodes you look up

When you check a postcode, your browser sends it to our server, and our server looks it up with postcodes.io (an open postcode service), the Norwegian Meteorological Institute for the weather, bustimes.org for bus stops and times, and National Rail for train times. Those services see a request from our server, not from you. A postcode on its own is usually not personal information, but your home postcode could be, so we keep as little as possible: each result is kept on our server for up to a day so the next visitor gets a quick answer, with nothing that links it to you. Our lawful basis is legitimate interests: answering the question you asked.

Messages you send us

If you use our secure contact form, we receive your email address and anything you include. We use it to reply and to act on what you tell us. Our lawful basis is legitimate interests: running an accurate service and answering the people who contact us. How long we keep messages: to be confirmed.

Advertising enquiries

If you send an advertising enquiry, we receive your business's name and website, your email address, your phone number if you give it, and the advert you propose. We use them to answer you, check the advert, take payment or invoice you, and run it. If you pay by card, Stripe processes the payment under its own privacy policy; we never see or store your card details, only Stripe's reference for the payment. Our lawful basis is taking steps at your request before a contract, then the contract itself. We keep enquiries that do not go ahead for a year, and records of adverts we run for six years, because accounting rules require it.

We count how often each advert is shown and followed. The count does not record anything about the people who see an advert: no cookies, no IP addresses, no profiles.

Business pages and accounts

If your business has a page on PostcodeGo, we keep your account's email address and a scrambled form of your password (we never see the password itself), and what you publish. Signing in sets one cookie, needed to keep you signed in, for the account pages only. Our lawful basis is the contract with your business. We keep account details while the account is open and for a year after it closes.

If you send an enquiry from a business's page, your name, contact details and message go to that business, which decides how to use them, and are kept in its account for 12 months, then deleted. We hold them on the business's behalf and use them for nothing else. We count views of business pages and clicks on their links without recording anything about the visitor.

Website analytics

With your permission only, we use Google Analytics to understand how people use the site, such as which pages are visited and roughly where visitors are. Until you accept analytics cookies, no Google script loads and nothing is sent to Google. Our lawful basis is your consent, which you can withdraw at any time using "Cookie settings" at the bottom of every page.

Google Analytics cookies use names beginning _ga. Google's advertising features (advertising storage, ad user data, ad personalisation and Google signals) stay off even if you accept. Your analytics choice is stored in your browser so we can respect it on later visits; if you reject analytics cookies later, we remove the Google Analytics cookies.

Our own server also counts page views so we know which pages are useful: for each view it adds one to that day's totals for the page, the website you came from (its name only, such as google.com) and whether the screen is a phone, tablet or computer size. It sets no cookies, keeps nothing in your browser, and does not store your IP address, your browser's details or anything else that could identify you, so the totals are not personal information. We keep them for as long as they are useful for running the site. If your browser sends a "do not track" or Global Privacy Control signal, your visit is not counted.

Server logs

Our hosting provider, Hostinger, keeps standard server logs, including IP addresses and the pages requested, to keep the site secure and working. Our lawful basis is legitimate interests.

Cookies

PostcodeGo sets no cookies unless you accept analytics cookies. If you do, Google Analytics sets cookies whose names start with _ga.

Anti-spam protection

Our public message forms use Cloudflare Turnstile to distinguish genuine visitors from automated abuse. Cloudflare receives technical information needed to perform that security check. We use the result only to protect the forms from spam and misuse.

Who we share information with

We do not sell personal information. We use Hostinger to host the site and handle our email, and Cloudflare for Turnstile anti-spam checks. The postcode services named above receive the postcodes our server looks up, without anything about you. If you accept analytics cookies, Google also receives analytics information about your visit.

Your rights

You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to how we use it, and to withdraw consent at any time. Use our secure contact form and we will reply within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.

We will update this notice if anything changes.