Privacy Policy
Last updated: 6 September 2026
1. Who we are
GapCheckUK is a UK SME compliance-readiness service operated under the name GapCheckUK. This policy explains what information the service handles, why it is needed, and the choices available to you.
2. Information we collect
We may collect your name, work email, company details, assessment answers, notes, action-plan data, subscription information, and supporting evidence that you choose to provide. We also receive account metadata such as the time you accepted the Terms and Conditions.
3. How we use information
We use information to create and secure your account, verify your email, tailor the assessment, calculate readiness results, provide reports, store actions and evidence, process subscriptions, prevent misuse, respond to support requests, and operate and improve the service.
4. Authentication and client sign-ups
We use your email address to send account verification messages and service-related communications. Your account cannot access the assessment until the email address is confirmed.
5. Assessment data and evidence
Authenticated assessment answers, notes, company profiles, actions, and evidence metadata are stored against your account. Uploaded evidence files are kept in a private storage area and are not public website files. Anonymous free-check answers are held temporarily in the browser and are only saved to your account after you create one.
6. Service providers
GapCheckUK uses Supabase for authentication, database services, and private evidence storage. Stripe processes paid subscriptions and payment details. Vercel hosts the website and server routes. These providers process information only as needed to provide their services and should be listed in your formal processor records.
7. Analytics, cookies, and local storage
Supabase Auth records registered accounts, so authorised administrators can see the number of users created and related account records in the Supabase dashboard. GapCheckUK does not currently run a separate optional product-analytics tracker. The site uses essential browser storage for session behaviour, cookie-consent choice, temporary free-check progress, and local fallback/demo data. Optional analytics should only be enabled after the cookie notice, privacy information, and consent controls are updated.
8. Retention and deletion
We keep account and assessment information while it is needed to provide the service, meet legal or security obligations, resolve disputes, or maintain appropriate records. You may ask GapCheckUK at GapcheckUK@gmail.com to access, correct, export, or delete your information. Deleting an account may also remove its company profile, assessment history, actions, evidence metadata, private evidence files, and subscription record, subject to legal or payment-record requirements.
9. Storage and security
We use access controls, authenticated sessions, row-level database policies, private evidence storage, and server-only credentials to protect information. The service is configured for UK/EEA processing as stated by the operator, subject to verification of each provider’s region and transfer settings. No online service can guarantee absolute security. Avoid uploading sensitive personal information unless it is necessary for your assessment.
10. Your rights
Depending on your circumstances, you may have rights to access, correct, delete, or restrict use of your personal information. Contact GapCheckUK at GapcheckUK@gmail.com to ask about your information.
11. Contact
For privacy questions or data requests, contact GapCheckUK at GapcheckUK@gmail.com.