Effective: 6 September 2026
CrierData is operated by CrierData Limited, registered in England and Wales (company no. 17363206), registered with the Information Commissioner's Office (registration ZC207871). This policy explains what personal data we process, why, and your rights. Contact for anything in this policy: [email protected].
We process two distinct kinds of data, and it is worth being clear about the difference.
CrierData's core dataset is compiled from official public registers — the national EPC register, HM Land Registry, Environment Agency and Natural Resources Wales flood data, Historic England, Cadw, official deprivation indices, and address data licensed from Ordnance Survey and Royal Mail. It describes properties: their addresses, energy performance, flood designations, heritage status and similar attributes. It does not contain names, and we do not link properties to their owners or occupiers.
Because an address can relate to an identifiable household, address-level records are treated as personal data under UK data protection law. Our lawful basis for processing them is legitimate interests: making already-public official records about the building stock of England and Wales usable in one place, for housing, energy, and property work. We have assessed and documented this balance. The data is already public at source; we add compilation and searchability, not new personal information.
If you want to know what our dataset holds about your address, or to raise a concern about it, email us. Note that because our data is derived from public registers, correcting an error usually means correcting it at source (for example, the EPC register); we can tell you where a record comes from so you can do that, and we reflect source corrections in our regular data updates.
If you create an account, we process:
We use a small set of service providers to run CrierData: Stripe (payments), Neon (database hosting), Cloudflare (networking and hosting), Krystal (server hosting), Resend (transactional email), and Anthropic (natural-language search). Each processes data only to provide their service to us. Some providers process data outside the UK; where they do, transfers are protected by recognised safeguards such as the UK Addendum to standard contractual clauses. We do not sell personal data, and we do not share it with anyone else except where the law requires.
Account data is kept while your account is open, and deleted within a reasonable period after you close it, except records we must keep for legal reasons (such as billing records for tax). Export files are automatically deleted 90 days after creation, though a record of each export — what was exported, when, and by which account, not the file itself — is kept as a permanent audit log, including after account closure. Property data is maintained and updated on our regular release cycle.
The platform stores a sign-in token in your browser's local storage to keep you signed in, and sets no cookies. We do not use advertising or third-party analytics cookies, so there is no cookie banner to click.
You have the rights UK data protection law provides: to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict processing, and to data portability. Email [email protected] and we will respond within one month. For property data derived from public registers, section 1 explains how corrections work.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to resolve it first.
We will update this policy as the service evolves and note the effective date at the top. Material changes will be flagged to account holders by email.