Legal
hyper-geo handles personal data in two distinct roles, and the difference matters because your rights differ depending on which one applies.
Account data. Information about you as a user of the service: your name, work email address, department and the record of jobs you have run. For this, Fortitude Labs Ltd is the controller. We decide what to collect and why.
Contact data. The names and postcodes inside the files you upload. For this, Fortitude Labs Ltd is a processor. Your organisation is the controller. We only ever act on your instruction, which in practice means matching those postcodes to forecourts and charge points and giving you the file back. If someone in one of your uploaded lists asks us about their data, we will refer them to you.
| What | Why | Lawful basis |
|---|---|---|
| Name, work email, department | To sign you in, to show whose job is whose, and to bill your department | Contract |
| Sign in codes | To verify it is really you. Stored hashed and deleted after 48 hours | Contract |
| Job records: filename, row count, cost, timestamps | Billing, invoicing and our own audit trail | Contract, and legal obligation for accounting records |
| Access request details | To decide whether to authorise your organisation | Legitimate interests, being the assessment of prospective customers |
We ask for the minimum: a name and a postcode. You choose which, if any, of your other columns are carried through, and columns you do not tick are never uploaded at all. They stay in your browser.
We delete uploaded contact data 14 days after a job is approved. That covers the rows themselves, the match results and the output file. What survives is the billing record: the filename, how many rows there were, what it cost, who ran it and when. That record contains no contact data.
We do not use your uploaded data to train anything, we do not enrich it, we do not sell it and we do not share it with any other customer.
All data is stored in the United Kingdom, in a Postgres database and object store operated by Supabase in the London region. The web application is served by Vercel. Sign in emails are sent through Resend. Each of these providers acts as a sub-processor to us, under contract, and we will tell you before we add or change one.
Some of these providers are established outside the UK. Where personal data is transferred out of the UK it is protected by the International Data Transfer Addendum to the European Commission’s standard contractual clauses, or by adequacy regulations.
For account data, you can ask us to give you a copy, correct it, delete it, restrict what we do with it, or object to it. Write to privacy@fortitudelabs.co.uk and we will respond within one month.
For contact data inside an upload, your organisation is the controller, so those requests go to them. We will help them answer.
If you think we have got something wrong you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first.
Anyone can run up to five sample lookups a day from our front page without an account. To count that allowance we store a salted hash of the visitor’s IP address and the date, never the address itself. The hash cannot be reversed to an address and is deleted after two days. We do not record the postcode you enter, and the check sets no cookie. The lawful basis is legitimate interests, being the prevention of abuse of a free service.
hyper-geo sets no advertising or analytics cookies. It stores one session token in your browser so you stay signed in. Removing it signs you out.
If we change this notice in a way that affects you, we will email the administrators at your organisation before it takes effect.