Your workbook stays with you.

Who is responsible

42ANALYTICS LTD, company SC894722, is responsible for personal data used to provide this service. Our registered office is The Steadings, Eastern Teuchan, Peterhead, United Kingdom, AB42 0PP. For privacy questions or to exercise your rights, email info@42analytics.co.uk.

Free inspection

You do not need an account. Your browser reads the workbook on your device. We do not upload workbooks, reports, preview values or review logs. Website delivery still involves an ordinary connection to our web server, which receives connection details such as your IP address, browser information and requested page. We use these to deliver and protect the service. Neither our public marketing pages nor the inspector uses advertising trackers, Cloudflare Web Analytics, or other visitor analytics. Cloudflare provides DNS for these domains; website traffic goes directly to our Hetzner server. Our public marketing pages do not set cookies. We do not enable routine page-access logging. Account-service diagnostics are described below.

Your Pro account

We store your name, email address, a protected password hash, verification status, account sessions and security information. We use these to create and secure your account and send verification, password-reset and subscription emails. Necessary account cookies keep you signed in. They are not advertising cookies. A signed Pro access permission connects your account to your inspector tab without sending its workbook or report.

Payments and subscription records

Stripe handles payment details. We store your billing name or organisation, optional purchase-order reference, Stripe customer and subscription identifiers, subscription status, paid period and the terms you accepted. Stripe stores your subscription billing address and, for EU business buyers, the VAT number and verification result. We retain the verification identifier, country, date and business declaration with the billing transaction. We check these details to limit paid sales to supported customers and meet our tax obligations. Stripe receives the information needed to take payment and issue invoices. We do not store your full card number or bank credentials. Account emails, including annual renewal reminders, are delivered through Resend.

Why we use this information

We use account, payment and service-email information to provide our contract with you. We use security and connection information for our legitimate interest in preventing abuse and keeping the service working. We retain records when required for tax, accounting or other legal obligations. If you contact us, our lawful basis for handling your enquiry is our legitimate interest in answering questions, providing support and responding to business enquiries. If your message concerns your contract, we also use it to perform that contract. You can object to processing based on legitimate interests. Please do not attach a real workbook unless we have agreed a separate, suitable support process.

Service providers

The website and account service run on a Hetzner server; Cloudflare provides domain and DNS services. Stripe processes payments and Resend delivers emails. These providers receive the information needed for their roles, not the workbook being inspected. Hetzner hosts our server in Germany, in the EEA, which is covered by the UK’s adequacy regulations. Stripe and Resend may process account, billing and email information in the United States. Their data-processing terms provide standard contractual clauses with the UK International Data Transfer Addendum for applicable UK transfers: Stripe’s transfer addendum and Resend’s data-processing addendum. These safeguards provide contractual protections for transferred personal data. Contact us for information about the safeguards or a copy. Cloudflare, Inc. is based in the United States. For applicable restricted transfers from the UK, Cloudflare’s data-processing terms include standard contractual clauses with the UK International Data Transfer Addendum. We do not sell personal data.

How long we keep it

• Accounts: while your account is open. Ask us to close it by email. Within 30 days of closure, we delete your account profile, sign-in credentials and sessions from our active systems. We keep only the billing, contract, tax or other records we still need for the periods explained below, and tell you what has been retained and why. Recovery copies follow the separate backup schedule below. Session permissions normally expire after 24 hours.
• Operational logs: account-service diagnostics normally rotate after 30 days. Routine page-access logging is disabled. Records needed to investigate a specific security incident or dispute may be retained until it is resolved.
• Enquiries: normally 12 months after the last substantive contact. A message that forms part of a contract, invoice, complaint or legal dispute is kept with that record for the relevant period instead.
• Invoices and accounting records: six years from the end of the company financial year they relate to, or longer where a tax enquiry or other legal requirement applies. This includes relevant payment, contract and tax-status evidence.
• Email delivery: email bodies leave our sending queue after provider acceptance or final delivery failure. Local delivery diagnostics are removed after seven days. Providers have their own retention arrangements.
• Backups: verified account backups rotate after 30 days, with the newest recovery copy retained until replaced. Deletions may therefore take longer to disappear from backups, which are restricted to recovery use.

Your choices and rights

You can ask to access or correct your information, delete it where the law allows, restrict its use, object to processing based on legitimate interests, or receive portable data where applicable. Contact info@42analytics.co.uk. We may need to confirm your identity. You can also complain to the Information Commissioner’s Office. We do not use your workbook or account information for automated decisions with legal or similarly significant effects.