Check Algarve

Privacy Policy

Last updated: 30 March 2026

1. Who we are

Check Algarve is operated by Bot Research Ltd, a company registered in England and Wales (company number 14206452), with its registered office at Seven Grange Lane, Pitsford, Northampton, England, NN6 9AP. Bot Research Ltd is the data controller for the purposes of the UK GDPR and EU GDPR.

Our ICO registration number is ZC077808.

2. What we collect

We collect the following personal data:

  • Report purchases: your email address and the map coordinates you selected
  • Contact form: your name, email address and message content
  • Analytics: anonymous usage data via Vercel Analytics (no cookies, no personal identifiers)

We do not collect sensitive personal data. We do not build user profiles or track you across websites.

3. How we use your data

  • Email addresses from report purchases are used solely to deliver your report and to handle any support requests related to your purchase
  • Contact form submissions are used to respond to your enquiry
  • Analytics data is used to understand how visitors use the Platform and to improve our service

We do not send marketing emails unless you explicitly opt in. We do not sell, rent or share your personal data with third parties for their marketing purposes.

4. Legal basis for processing

We process your data on the following bases:

  • Contract performance: processing your report purchase and delivering your report
  • Legitimate interest: responding to enquiries and improving the Platform
  • Consent: where you have opted in to marketing communications

5. Payment processing

Payments are processed by Stripe, a PCI DSS Level 1 certified payment processor. When you make a purchase, you are redirected to Stripe's secure checkout page. We do not receive, store or have access to your full payment card details. Stripe processes your payment data in accordance with their privacy policy.

6. Third-party processors

We use the following processors:

  • Stripe (payment processing): USA, EU standard contractual clauses
  • Supabase (database, EU-hosted): stores report records and contact submissions
  • Vercel (hosting): serves the website
  • Web3Forms (contact form delivery): forwards form submissions to us
  • Resend (transactional email): delivers report download emails

7. Data retention

Report purchase records (email and coordinates) are retained for 12 months from the date of purchase to enable re-downloads. Contact form submissions are retained for 6 months. Analytics data contains no personal identifiers and is retained indefinitely in aggregate form.

8. Your rights

Under UK GDPR and EU GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate personal data
  • Request deletion of your personal data
  • Object to processing of your personal data
  • Request restriction of processing
  • Data portability
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us via our support page. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our ICO registration reference is ZC077808.

9. Cookies

The Platform uses only essential cookies required for site functionality. We do not use advertising or tracking cookies. Vercel Analytics is cookie-free and does not collect personal identifiers.

10. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Material changes will be highlighted on the Platform.