Your data, plainly.
Version 1 · last updated 8 September 2026. This notice covers jackson.nofooly.com — the free Viewing Check, Foolproof reports, quote requests, and the messages we send to businesses. It is written for the UK, and written to be read.
1. Who is responsible for your data
NoFooly Ltd, registered in England & Wales (company no. 17438330), 66 Paul Street, London EC2A 4NA, is the data controller. We trade as NoFooly Foolproof — the "Jackson" reports.
We have registered with the Information Commissioner's Office (ICO) — application C2027580; the registration reference will be added here when the certificate arrives.
Questions, requests or complaints about your data: [email protected]. Businesses we've written to can also use [email protected].
2. If you use the site or buy a report — what we collect, and why
| When you… | We collect | Why (and our lawful basis) |
|---|---|---|
| Use the free Viewing Check | The postcode you type, what you're doing (buying, renting, selling, comparing), and optionally an asking price or rent. No name, no email. | To compile the check for that postcode. We keep only a daily count of how many checks were run — not the postcodes, and nothing that identifies you. (Legitimate interests.) |
| Order a Foolproof report | Your name, email address and payment — collected by Stripe on its secure checkout page. We receive your name, email and an order reference; we never see or store your card details. The postcode, house number and report tier you chose, your written brief if you give one, the report we produce, and when it was delivered. | To prepare and deliver the report you've paid for, and to answer questions about it. (Contract.) Order and payment records are also kept for tax and accounting law. (Legal obligation.) |
| Ask for a quote (business reports, websites, research, odd jobs) | Your name, email, website if you give one, budget, deadline, and what you wrote. We also note the type of browser used (a basic anti-spam measure). | To reply to you and discuss the work. (Steps before a contract / legitimate interests.) |
| Visit any page | Standard web-server logs at our host, Cloudflare (IP address, browser type, pages requested). Our pages load fonts from Google Fonts, which means Google receives your IP address when a page loads. | To run the site securely and keep it up. (Legitimate interests.) |
| Accept cookies on the banner | Only if you press Accept: Google Analytics 4 (how the site is used — aggregated, with IP anonymisation on) and the Meta Pixel (whether our ads bring the right people here). Nothing is set if you reject or don't choose. | To understand and improve the site and our advertising. (Consent — withdraw any time via "Cookie choices" in the footer.) |
Messages after you buy
We email you about your order — delivery, and any correction you ask for within 14 days. We don't send marketing. If that ever changes for existing customers (for example a "did the report help?" note), every such message will carry a one-click way to stop, and this notice will say so first.
3. How a report is made — where your details go
A report is compiled from official and open UK data sources at postcode level (for example HM Land Registry, the Environment Agency, data.police.uk, Ofcom, the ONS, PlanIt, TomTom). None of those sources receives your name or email — only the postcode and, where relevant, a house number.
The analyst's notes in your report are first drafted by an AI model (from Anthropic) and then read, corrected and signed off by a person before anything is sent. To draft them we send the compiled facts and your written brief in your own words — so the notes answer what you said matters. We do not send your name, email or payment details to the AI provider, and it is contractually prohibited from using our data to train its models.
Your finished report is emailed to you from [email protected] (Microsoft 365) and is also available at a private link that works for 90 days. The page behind that link is marked not-to-be-indexed by search engines.
If someone else asks about the same area or property
The facts we compile about a postcode or a property come from public data and aren't personal data, so we may reuse them when another person asks about the same place. Your brief, your name, your email and the notes written for you are yours alone. We never tell anyone else that you asked about a property, and nothing in another person's report reveals that you did.
What we learn from requests
We keep anonymous statistics about what's requested — which areas, which report types, which concerns come up most (flooding, commute, schools…) — so we can see what buyers and sellers are actually worried about and improve the service. These are counts and patterns; they don't identify you and we never publish anything that could. (Legitimate interests; anonymised.)
4. If we contact your business
We sometimes write to businesses that work with home buyers — conveyancing solicitors, mortgage brokers, estate agents — to offer our reports for their clients.
- Who: only incorporated businesses (companies, LLPs, public bodies), at a business address we found on a public register (Companies House, the SRA register, the FCA register) or the firm's own website. We do not cold-email sole traders, partnerships or individuals without their consent.
- Why (lawful basis): our legitimate interest in offering a relevant service to businesses that serve home buyers, as permitted for corporate subscribers under the UK Privacy and Electronic Communications Regulations.
- Your choice: every message says who we are and how to stop, and ends with a "stop" link — one press and we stop immediately, no login, no reason needed. You can also reply "no thanks" or email [email protected]. Either way we record your opt-out for the address we wrote to — and, where we can identify it, your firm — check it before every send, and never write again. A person reads every reply.
- What we keep: your opt-out is kept for as long as it's needed to honour it (a "don't contact" record has to persist to work). The other outreach records — the firm's name, company number, the business address we wrote to, when we wrote, and any reply — are kept for up to 24 months.
5. Who processes data on our behalf
We use a small number of providers, each under a contract that limits what they may do with the data:
- Stripe — payments (Stripe is also a controller for the payment itself; see Stripe's privacy policy).
- Cloudflare — hosting, our application code and the database that holds orders, briefs and reports (UK/EU regions where available).
- Microsoft 365 — email (UK tenant).
- Anthropic — drafting the analyst's notes (facts + your brief only, as above).
- Fly.io — the service that renders the report page into a PDF.
- Google — Google Fonts (always), Google Analytics 4 (only with consent).
- Meta — the Meta Pixel (only with consent; "advanced matching" is switched off, so no personal details are sent to Meta).
- postcodes.io and the public data sources above — postcode-level lookups only.
Some of these providers process data outside the UK (principally in the United States). Where they do, transfers are covered by UK-approved safeguards — the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or a UK adequacy decision.
We do not sell your data, we do not share it with data brokers, and we do not share it for other people's advertising.
6. How long we keep it
| Data | Kept for |
|---|---|
| Your written brief and the working data behind your report | Up to 90 days after delivery, then deleted automatically (a daily process) — long enough to answer your questions and honour the 14-day correction promise. |
| The report itself (the PDF we hold) | 90 days after delivery — deleted when the private link expires. The PDF we emailed is yours to keep. |
| The private report link | Works for 90 days from delivery, then expires. |
| Order and payment records (name, email, order, amount) | 6 years from the end of the tax year, as required for tax and accounting. |
| Quote requests and business enquiries | While we're discussing the work, and for 12 months after our last contact. |
| Business outreach opt-outs | Kept for as long as needed to honour them. |
| Other business outreach records (firm, address written to, when, any reply) | Up to 24 months. |
| Free Viewing Check | Not stored against you — only a daily total is kept. |
| Your cookie choice | Stored in your own browser until you clear it or change it. |
| Analytics / advertising data | Held by Google and Meta under their own retention settings (Google Analytics: up to 14 months). |
7. Cookies
By default this site sets no analytics or advertising cookies. When you first visit, a banner asks whether we may set two: one for Google Analytics and one for the Meta Pixel. Reject, or make no choice, and neither is loaded. Accept, and you can change your mind at any time using "Cookie choices" in the footer of every page. The site also remembers your light/dark theme choice in your browser — that's not a tracking cookie and isn't sent anywhere.
8. Your rights
Under UK data protection law you can ask us to: access the data we hold about you; correct it; delete it (we'll do so unless we must keep it for tax law); restrict or object to how we use it — including any messages from us; and, for data you gave us under contract, receive a copy in a portable format. Where we rely on consent (cookies), you can withdraw it at any time.
Email [email protected]. We'll respond within one month. You also have the right to complain to the ICO: ico.org.uk/make-a-complaint or 0303 123 1113 — though we'd welcome the chance to put things right first.
9. Security
Data is stored and transmitted encrypted (HTTPS everywhere). Access to orders and reports is limited to the people preparing them, behind sign-in. Report links use long random tokens and expire. We never handle card numbers.
10. Children
Our services are for adults buying, renting or selling property. We don't knowingly collect data from anyone under 18.
11. Changes to this notice
If we change how we use your data, we'll update this page and the date at the top. The terms you agree to when ordering are on the report page.