This Privacy Policy explains how Distressed.uk (“we”, “us”) processes personal data under UK GDPR and the Data Protection Act 2018.
Who we are
Controller: the operator of Distressed.uk (Companies House number 07700261), Popeshead Court Offices, Peter Lane, York, YO1 8SU. Contact: admin@distressed.uk.
What we collect
- Account details (name, email, password hash, plan, billing profile)
- Usage logs (searches, API calls, IP address, timestamps)
- Support messages you send us
- Payment metadata via Stripe (we do not store full card numbers)
- Security signals (reCAPTCHA tokens, honeypot hits, blocklists)
Why we process it
To provide the Service, bill subscriptions, prevent abuse, send digests you opt into, and improve reliability. Legal bases include contract, legitimate interests (security and product improvement), and consent where required (e.g. non-essential cookies).
Sharing
We use processors such as Stripe (payments), email delivery providers, hosting, and Google (reCAPTCHA / Analytics if enabled). We do not sell your personal data.
Retention
Account data is kept while your account is active and for a reasonable period afterwards for legal, tax, and security purposes. Logs are retained for operational windows then deleted or aggregated.
Your rights
You may request access, correction, deletion, restriction, or portability, and complain to the ICO. Contact us to exercise rights.
Last updated: September 2026.