Legal

Privacy notice

What this site stores, why, and for how long. Last updated 18 October 2026.

Who is responsible

Bosman ICT Services operates this site and is the data controller for anything it stores. You can reach us through the contact form.

When you check a postcode

A postcode is not personal data on its own, and we do not ask who you are. The postcode you enter is sent to postcodes.io to get its coordinates, and the coordinates go to the Environment Agency's public map and flood-monitoring services to get the flood information. These are public services and neither receives anything that identifies you.

We keep the answer for seven days in a cache, keyed on a rounded coordinate rather than on your postcode, so that neighbours share a result and the public services are not queried needlessly. We record that a check happened, with the page it happened on and the IP address, so we can see which parts of the site are used. We do not build a profile from it.

When you order a report

We store your email address, the postcode, an optional house name or number if you enter one, the coordinate the report is based on, the amount paid, the payment reference from Mollie and your IP address. We need those to produce the report, send it to you, and answer a question about it later.

Your card details never reach us. Mollie handles the payment and we only receive whether it succeeded. Mollie has its own privacy notice.

Orders are kept for seven years, because they are accounting records and the tax rules require it. The generated PDF is kept for two years so that your download link keeps working.

When you use the contact form

Your name, email address, message and IP address are written to a log outside the public web directory and emailed to us. We keep the message as long as the matter is open and up to two years afterwards.

Advertising and analytics

The site carries advertising, which may set cookies and use identifiers to choose what to show you. Those services are controlled by the advertiser, not by us, and their notices apply to what they collect. If analytics is enabled, it runs in a form that does not store your full IP address.

Your rights

Under the UK GDPR you can ask what we hold about you, ask for it to be corrected, ask for it to be erased where we do not have to keep it, object to processing and ask for a copy. Write to us and we will answer within a month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

Where the data lives

On servers in the European Economic Area. Mollie is established in the Netherlands. The public data services we query are operated by UK public bodies and by postcodes.io.