Privacy Notice

During the controlled private beta, IDpurge is operated personally by the individual who invited you to test the service. The invitation or accompanying beta communication must identify that operator and provide a direct contact method. Do not submit personal information if you have not been given those details.

The planned operating company is idpurge LTD. Incorporation and the transition from the individual beta operator are not yet complete. Its address and registration details are left blank in the company information above until confirmed.

You can contact IDpurge about privacy, data-protection rights or complaints at privacy@idpurge.co.uk.

Depending on how you use the service, IDpurge may process:

• account and authentication information, such as your email address and login/session records;
• identity information, including your full legal name and previous names or aliases;
• contact information, including primary and additional email addresses and mobile number;
• address information, including postal address, postcode and country;
• service records, including scans, broker checks, exposure findings, evidence, request status, notes and action timestamps;
• correspondence and support information when you contact IDpurge or when IDpurge communicates with a broker on your behalf; and
• limited technical and security information needed to authenticate users, operate the service, prevent abuse and investigate faults.

IDpurge is designed to minimise the information it collects. You should not submit special category information, criminal-offence information or information about another person unless IDpurge has specifically asked for it and you are lawfully entitled to provide it.

The current onboarding form requires your name, account email, address, postcode and mobile number for account access and record matching. Previous names and additional email addresses are optional. Without the required information we cannot complete the current scan setup. Providing it does not sign you up for marketing.

We ask you to confirm that you are a UK resident aged 18 or over using your own information. This is a self-declaration; it is not documentary age verification, and we do not collect your date of birth or identity documents simply for this declaration.

Most information is provided directly by you during account creation and onboarding. IDpurge may also obtain information from data brokers, people-search services, public-facing sources and organisations contacted as part of the privacy-removal process. Broker replies and removal confirmations may also become part of your service record.

IDpurge uses personal information only where there is a lawful reason to do so.

• Providing the requested privacy service. During the invited beta, this is based primarily on legitimate interests in operating and testing the service and carrying out the privacy actions you ask IDpurge to perform. Where a paid customer contract exists in future, processing necessary to provide that service will also rely on performance of the contract or steps requested before entering it.
• Account security, fraud prevention and service reliability. This is based on legitimate interests in protecting users, systems and the service from misuse.
• Compliance with law and regulatory obligations. Where processing is required by law, IDpurge relies on the applicable legal obligation.
• Optional marketing or non-essential tracking. IDpurge does not currently use advertising or analytics tracking. If optional marketing or non-essential cookies are introduced, they must use an appropriate lawful basis and, where required, prior consent.

IDpurge does not use consent as a blanket justification for the core service. Where consent is specifically relied on, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

To carry out a removal, opt-out, correction or related privacy request, IDpurge may need to send enough identifying information to the relevant broker or organisation to allow them to locate the correct record and verify the request. Only information reasonably necessary for that purpose should be shared.

IDpurge also uses specialist providers to host, authenticate, secure and operate the service:

• Supabase: account authentication, database and private file storage.
• Vercel: website and application hosting.
• Linode / Akamai: background processing and encrypted recovery storage.
• Resend (Plus Five Five, Inc.): automated outbound correspondence and incoming broker replies, including message content and attachments where present.
• Fastmail: business, support and privacy mailboxes.
• Healthchecks.io: backup monitoring. The heartbeat contains no customer records or email content; the provider also handles operational account and notification information.

Relevant brokers and organisations receiving your requests are separate recipients, responsible for their own processing. We share only the identifying information needed for the particular request.

IDpurge does not sell customer personal information and does not provide customer data to third parties for their own advertising purposes.

Our current Supabase project is hosted in the European Union. The application also uses Vercel processing in the United States, and encrypted recovery storage in London. Hosting regions do not by themselves limit where a provider's support, replicas, logs or subprocessors may process information.

Some technology providers may process or support personal information outside the United Kingdom. Where UK data-protection law restricts an international transfer, IDpurge must use an applicable lawful transfer mechanism and appropriate safeguards. Before public launch, the exact hosting regions, subprocessors and transfer safeguards must be documented and this notice updated where necessary.

Resend stores message content, delivery logs, webhook data and account records in the United States. Choosing its Ireland sending region does not move stored data to Europe. Resend's published Data Processing Addendum includes Standard Contractual Clauses and the UK Addendum for applicable UK transfers. You can ask us for information about the safeguards relevant to your data.

Fastmail's EU residency option stores the primary mailbox copy in the European Union and a replica in the United States; its backups, logs and debug systems are based in the United States. See Fastmail's data residency information.

Resend's current Data Processing Addendum and subprocessor list explain its processing arrangements.

Personal information is kept only for as long as it is reasonably needed for the purpose for which it was collected. The factors used to decide retention include whether your account is active, whether broker requests remain open, whether records are needed to evidence actions taken on your behalf, security and fraud-prevention needs, dispute periods and legal or regulatory obligations.

Full broker correspondence is normally retained for 12 months after a case is resolved. Unresolved cases remain tracked while needed to provide the service and are reviewed regularly. Minimal case history, including the broker, dates, actions and outcome, is retained while needed for the customer’s ongoing service.

On account closure, new work stops and routine account and case information is scheduled for deletion within 30 days. Valid erasure requests are considered without waiting for the ordinary retention period. Selected records may be retained for a specific, documented legal obligation or dispute, with a review date and restricted access.

Encrypted recovery copies use a rolling 14-day recovery window. This is separate from the retention of correspondence in active case records. Physical removal of expired backup versions can take longer because of storage-provider processing and protection periods. Deleted information in backups is excluded from ordinary use and must not be reintroduced during recovery. Minimal deletion receipts, containing identifiers and timestamps rather than email content, are retained for 90 days to support recovery checks and deletion reconciliation. Private-beta test information is also reviewed at the end of the beta.

Resend's published standard retention for emails and logs is 30 days on its Free, Pro and Scale plans; its recovery backups persist for 7 days. Its published terms allow up to 90 days to delete remaining customer data after termination of the Resend account. Closing your IDpurge account does not itself terminate our Resend account, and deleting our copy does not immediately delete provider-held copies. Provider deletion requests and any applicable exceptions are considered when handling your data-protection request.

IDpurge is designed around authenticated access, server-side privileged operations and per-user data separation. Access to customer records should be restricted to what is needed to provide and operate the service. No system can guarantee absolute security, but IDpurge aims to use proportionate technical and organisational measures and to minimise the personal information stored and disclosed.

IDpurge currently aims to use only technologies that are strictly necessary for login, authentication, security and delivery of the service. It does not currently use advertising, behavioural tracking or analytics cookies. See the Cookie Notice for more detail.

IDpurge does not currently make solely automated decisions that produce legal effects or similarly significant effects for customers. Automated tools may assist operational work, but important customer and broker actions remain subject to human oversight.

Depending on the circumstances, UK data-protection law may give you rights to:

• be informed about how your personal information is used;
• ask for access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for information to be erased in certain circumstances;
• ask for processing to be restricted in certain circumstances;
• receive certain information in a portable format where the right applies;
• object to certain processing, including processing based on legitimate interests; and
• withdraw consent where processing is specifically based on consent.

Send rights requests to privacy@idpurge.co.uk. We consider requests promptly and normally respond within one calendar month, subject to the extensions or other adjustments permitted by law. Identity verification may be required before information is disclosed or changed.

Exercising your data-protection rights against IDpurge is normally free. A subscription or cancellation charge does not apply to those requests; any exceptional fee must meet the conditions permitted by data-protection law.

You can also contact us to withdraw your authority for future broker requests. This does not recall information already sent to a broker or automatically remove records we must lawfully retain. See contact and complaints for the available routes.

You can complain about our handling of your information at privacy@idpurge.co.uk. We acknowledge data-protection complaints within 30 days, investigate without undue delay, keep you informed and explain the outcome. The acknowledgement period is not a waiting period before we start investigating.

You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe your information has been handled unlawfully. Information about making a complaint is available from the ICO at ico.org.uk.

The current beta is for UK residents aged 18 or over managing their own information. We do not currently offer child, family or representative accounts. Do not submit a child's or another person's information through the onboarding form.

This notice will be reviewed as the service changes. Material changes affecting how personal information is used should be brought to users' attention before the new processing begins. A full legal-entity and supplier/transfer review is mandatory before public paid launch.