Privacy policy

Controller

Covalt Services Ltd (Company No. 16940210), 141 Purves Road, London, NW10 5TH is the data controller. Contact: support@covaltwork.com. This policy follows the UK GDPR and the Data Protection Act 2018.

Data we process

• Customer data: your work email, order references, the companies you search for or order reports on, and any agreement you upload for an audit.
• Research data: information about companies and their officers taken from public registers (Companies House, GLEIF, SEC EDGAR), such as names, appointments and dates.
• Payment data: handled by our payment provider. We never see or store your full card details.

Why and on what basis

• To deliver reports you order and support you — performance of a contract.
• To compile research from public registers — our legitimate interest in helping businesses check counterparties, balanced against the public nature of the data.
• To keep tax and accounting records — legal obligation.
• To send you product updates if you asked for them — consent, which you can withdraw at any time.

Who receives data

Our report-processing platform operated by Covalt, our payment provider and merchant of record, and hosting providers. Some providers may process data outside the UK under appropriate safeguards such as UK adequacy regulations or standard contractual clauses. We do not sell personal data.

Your browser

To open a paid report, a private access key for that order is kept in your browser's session storage and is cleared when you close the tab. We do not use advertising cookies.

We use Lovable's visitor analytics, which uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors and clicks. Detailed data is kept for 90 days and daily summaries for a year. This is recorded for every visitor, without cookies and without identifying anyone. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

Retention

Order and invoice records are kept for 6 years for tax purposes. Uploaded agreements can be deleted from your result page and are otherwise removed after the order is fulfilled.

Your rights

You can ask to access, correct, delete, restrict or object to use of your data, and to move it. Email support@covaltwork.com. You may also complain to the Information Commissioner's Office (ico.org.uk).

See also our terms.