Skip to content

Privacy Policy

Last updated: 29 June 2026

Who We Are

CompanyMinder is operated by Crocker Digital Ltd, a company registered in England and Wales (Company No. 17008789). Crocker Digital Ltd is the data controller for information collected through this website.

What Data We Collect

  • Account data — your email address and the company, register, officer, and document records you create when you use CompanyMinder.
  • Billing data — if you subscribe, your name, email and payment details are processed by our payment provider, Stripe, to manage your subscription. We never see or store your full card number.
  • Analytics data — page views and referrer information collected by GoatCounter. GoatCounter does not collect personal data and does not use cookies.

Why We Collect It (Lawful Basis)

We process your personal data under the following UK GDPR lawful bases:

  • Contract performance (Article 6(1)(b)): to provide the CompanyMinder service — maintaining your registers, generating documents, processing your subscription, and sending deadline reminders.
  • Legitimate interest (Article 6(1)(f)): to understand how the site is used (privacy-focused analytics), improve our content and tools, and monitor for errors and abuse.
  • Legal obligation (Article 6(1)(c)): to keep limited records, such as billing records, where the law requires us to.

How We Store It

Your account data is stored securely, encrypted, and hosted in the UK/EU under UK GDPR. Your statutory records and generated documents are exportable at any time and are retained for as long as your account is active, or until you request deletion.

How Long We Keep It (Retention)

We keep your data only as long as we need it to provide the service and meet our legal obligations:

  • Account, company, register, officer and deadline records — kept for the life of your account. When you delete your account, this data is permanently erased.
  • Generated documents, share events and audit history — kept for the life of your account. Because these are an evidential record of corporate actions, on account deletion they are anonymised in place (personal details removed) rather than destroyed: the historical fact is preserved while the personal data tied to it is erased.
  • Stored PDF documents — kept for the life of your account and deleted when your account is deleted.
  • Email logs — records of the emails we send you (for delivery and unsubscribe handling) are kept for 90 days on a rolling basis, then automatically deleted.

You can export your data at any time, and you can request deletion under your right to erasure. See “Your Rights” below.

Who We Share It With

We never sell your personal data and we never share it for advertising. We do use a small number of trusted service providers (sub-processors) to run CompanyMinder. Each only receives the data needed to perform its function, under a data-processing agreement:

  • Supabase — database, authentication, and file storage (UK/EU, eu-west-2).
  • Stripe — payment processing and subscription billing (receives your name and email to manage your subscription).
  • Resend — transactional email delivery (receives your email address to send reminders and account notices).
  • Sentry — error monitoring (may incidentally process technical data to diagnose faults; EU region).
  • Upstash — rate-limiting infrastructure (short-lived counters only, no record content).
  • Netlify — application hosting, edge functions, and CDN.
  • Cloudflare — bot protection (Turnstile) on signup and other sensitive forms.

GoatCounter, our analytics provider, is privacy-focused and collects no personal data. We also use Microsoft 365 (Microsoft Ireland Operations Limited) to host our support mailbox. We may disclose data where required by law.

For the full list of sub-processors — with legal entities, data categories, processing locations, and transfer safeguards — see our sub-processors page. If you process other people's personal data through CompanyMinder (for example, details of directors, PSCs, or shareholders), our Data Processing Agreement applies and is incorporated automatically into our Terms of Service.

Your Rights (GDPR)

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate personal data
  • Request erasure of your personal data (Article 17)
  • Data portability — request a copy of your data in a portable format (available via Settings > Export)
  • Restrict our processing of your data in certain circumstances
  • Object to processing based on our legitimate interests

To exercise any of these rights, contact us at support@companyminder.co.uk.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have handled your data improperly. You can contact the ICO at ico.org.uk/make-a-complaint/ or on 0303 123 1113.

Contact

For any questions about this privacy policy or your data, email support@companyminder.co.uk.