Privacy policy
Last updated 5 November 2026
This policy explains what personal data we collect when you use this website and the free tools, what we do with it and how long we keep it. A separate data processing agreement covers your customers' data when you use the paid service.
Who is responsible
Subscription Law is a trading name of AI Programs Holdings Ltd, a company registered in England and Wales (company number 17516543). Registered office: 128 City Road, London, EC1V 2NX. ICO registration number ZC280525. That company is the controller of the data described here. Contact: hello@subscriptionlaw.co.uk.
What we collect and why
| Data | When | Why and on what basis |
|---|---|---|
| The web address you ask us to scan, the score and findings, and short excerpts of the page text | When you run the compliance scan | To produce and show you the report. Our legitimate interest in providing the tool you asked for. |
| Your email address, and the business name if you give it | When you unlock a scan report, request early access, or ask about an integration or partnership | To send you what you asked for. Marketing emails only if you tick the box, which you can withdraw at any time. |
| A daily visit counter | On every page | To see which pages are used. We store the page, the referring site, any campaign tags in the address and a hash made from a secret, the date, your connection address and browser. The hash changes every day and cannot be turned back into your address. We do not store your IP address or browser details. No cookie is set. |
| Analytics cookies through Google Tag Manager and Google Analytics | Only after you choose Accept on the cookie banner | To understand how visitors use the site. Your consent, which you can change in the cookie settings. |
| A partner referral code | When you arrive through a partner link | To credit the partner if you later become a customer. Our legitimate interest in running the partner programme. |
| Account, billing and support details | When you take out a paid plan | To provide the service and keep accounts, under our contract with you and our legal duties. |
How long we keep it
- Scan reports and the email addresses captured with them: 24 months, then deleted.
- Early access and partner enquiries: 24 months after our last contact, then deleted.
- The visit counter: 26 months of daily totals; individual hashes are useless after the day they were made.
- Records of notices, cancellations and refunds kept on behalf of customers once the product is live: 7 years by default, because they are evidence of compliance, or the period the customer sets.
- Account and billing records: 6 years after the account closes, as tax law requires.
Who we share it with
Our hosting provider in the United Kingdom, our email delivery provider, Stripe for payments on paid plans, and Google for analytics after consent. We do not sell personal data. We share it with authorities only where the law requires.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to our use of it, ask us to restrict it, and withdraw consent where we rely on it. Email hello@subscriptionlaw.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk. Our ICO registration number is ZC280525.
Changes
We will post any change here and update the date at the top. Material changes to how we use your data will be told to you by email if we have your address.