Privacy Policy

applywell(“we”, “us”) is the data controller for personal data collected via this site. We are based in the United Kingdom and the UK GDPR + Data Protection Act 2018 apply. This page sets out what we collect, why, and your rights.

What we collect

• Your email address — when you sign up, join the waitlist, or use the free quick-check and tick the box asking us to email your verdict. Used to identify you and send sign-in links and (with consent) follow-up emails.
• Project information you enter — project name, postcode, project type, uploaded drawings. Used to generate your planning analysis.
• Site data we look up on your behalf — your council (LPA) and any planning designations at your postcode (Conservation Areas, Listed Buildings, Article 4 Directions, etc.). Sourced from planning.data.gov.uk.
• Billing details — processed entirely by Stripe. Stripe sends us your customer ID and subscription state, never your card number.
• Anonymous analytics (only with your consent) — Google Analytics 4 with IP anonymisation. Records page views and aggregate engagement so we can understand which content is useful. No advertising or cross-site tracking. You decide via the cookie banner; you can change your mind by clearing site data.

Lawful bases for processing

• Contract — running an analysis you requested, sending sign-in links, taking payment.
• Consent — analytics cookies, quick-check follow-up emails. You can withdraw consent at any time.
• Legitimate interest — operating, securing and improving the service, and corresponding with you about your account.
• Legal obligation — accounting records, tax reporting.

Cookies

We use a minimal set of strictly-necessary cookies to keep you signed in. With your consent (via the banner that appears on your first visit) we additionally load Google Analytics 4 with IP anonymisation — this drops _ga and _ga_* cookies. We do not run advertising, retargeting, or social-media tracking cookies. If you decline, no analytics scripts load and the site keeps working with auth-only cookies.

Marketing emails

If you tick the box on the free quick-check, we'll email you (a) your verdict immediately, and (b) up to three follow-ups about your council's common rejection patterns and what a full applywell analysis catches. Every email contains a one-click unsubscribe link. You can also email us at hello@applywell.co.uk to be removed.

Sub-processors

• Supabase — database, authentication, file storage (EU region: eu-north-1).
• Vercel — application hosting and edge network.
• Anthropic — AI analysis (Claude). Inputs are not used to train Anthropic models.
• Stripe — payments. PCI-DSS Level 1 certified.
• Cloudflare — DNS and edge security.
• Resend — transactional email delivery.
• Google Analytics 4 — only loaded if you accept analytics cookies; IP anonymised.

International transfers (where applicable) take place under the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy mechanism in force at the time.

How long we keep data

• Account and project data — for as long as your account is active, then 30 days after deletion request.
• Quick-check leads — until you unsubscribe; we then retain a hashed record of the unsubscribe so we don't accidentally re-email you.
• Billing records — 6 years (HMRC accounting requirements).
• Anonymous analytics — Google's default retention (we set 14 months).

Your rights (UK GDPR)

You can request access to, rectification of, erasure of, restriction of processing of, or portability of your personal data, and object to processing, at any time. Email hello@applywell.co.uk. If you're unhappy with our response you can complain to the UK Information Commissioner's Office (ICO).

For professional customers

If you're an architect or consultant uploading client data, we act as your data processor under UK GDPR Article 28 — see our Data Processing Agreement.

Contact

Questions or complaints: hello@applywell.co.uk.