Privacy notice
What we hold about you, why we hold it, and how to make us stop. Last updated September 2026.
Who we are
Standfile is operated by Jonathan Durban from London, United Kingdom, and is the data controller for the personal data described here. Contact: jonathan@standfile.co.uk.
Company information is not personal data — mostly
Nearly everything we process is public company information from the Companies House register, published under the Open Government Licence. Information about a company is not personal data. Where the register names a person — a director, for instance — that is personal data that Companies House has already published, and we process it only as part of describing the company.
What we hold about you
| What | Why | Lawful basis |
|---|---|---|
| Your email address | Signing you in, sending the reports and alerts you asked for | Contract |
| Your name and practice name | Putting your name on reports you send to your own clients | Contract |
| The companies you watch | Knowing what to read the register for | Contract |
| Who you sent a report to | Showing you what you have sent, and letting you revoke a link | Contract |
| An email address you gave us for a free check | Sending you that report, and telling you if the record moves | Consent |
| A business email we wrote to first | Telling a company something visible on its own public record | Legitimate interests |
If we contacted you first
We read the register and write to companies where something on the public record needs attention — an overdue filing, a strike-off notice. We do this under legitimate interests: the information concerns that company, is already public, and is usually something its directors would want to know.
We write to businesses, not to consumers, and every message says how to stop. One word of reply — stop — is enough, or use the link in the email, which needs no sign-in. We keep a record that you asked so that we do not write again.
Who else sees it
Resend delivers our email and therefore handles the address we are sending to. Fly.io hosts the application and its database, in London. Companies House is where the company data comes from; we read it, they do not receive anything from us about you.
We do not sell data, we do not share it for advertising, and we run no third-party analytics or advertising trackers on this site.
Cookies
One cookie, set when you sign in, which keeps you signed in. There are no advertising or analytics cookies, which is why this site has no cookie banner — there is nothing to ask you to consent to.
How long we keep it
Account data for as long as you have an account, and twelve months afterwards in case you come back. Reports you have sent stay readable while the account exists, because the links are in other people’s inboxes. A record that you asked us to stop emailing is kept indefinitely — deleting it is how people get written to twice.
Your rights
Under UK GDPR you can ask for a copy of what we hold, ask us to correct or delete it, object to processing, or ask for it in a portable form. Email jonathan@standfile.co.uk and you will have an answer within 30 days. If you are not satisfied you can complain to the Information Commissioner’s Office.
One limit worth stating plainly: we cannot delete anything from the Companies House register. If a filing or a director’s details are wrong there, that has to be corrected with Companies House, and our report will follow once it is.
See also our terms and what we are and are not.