Privacy notice

Version 2026-08-27. This notice applies to the PremisesPulse website, alert service, user accounts, account management and paid subscriptions.

Who controls your data

PremisesPulse.co.uk is operated by Urban Sky Web Ltd, the data controller for this service. Urban Sky Web Ltd is registered in England and Wales under company number 17421062. Its registered office is 14/2E Docklands Business Centre, 10–16 Tiller Road, London, E14 8PX. Privacy enquiries can be sent to privacy@premisespulse.co.uk.

Personal data we collect

We collect the information you submit, including your work email address, company name, alert areas, postcode prefixes, business-type preferences, signal preferences and marketing choice. We also keep subscription identifiers, email-delivery records, consent evidence, data-rights requests and limited account-security records.

Passwords are never stored in readable form. PremisesPulse stores a one-way password hash. We also store hashed, expiring verification, password-reset and sign-in-session tokens, login-attempt records and, where you connect Google, Google's unique account identifier and verified email address.

For consent and security evidence, an incoming IP address is converted into a keyed one-way hash rather than stored in readable form. Payment-card details are collected and held by Stripe and are not stored by PremisesPulse.

Why we use personal data

We process account and preference data because it is necessary to provide the alert service you request and to take steps at your request before entering a subscription contract. We process payment and accounting records to meet contractual and legal obligations. We use proportionate authentication, session and abuse-prevention records for our legitimate interests in protecting the service and its users.

Marketing emails are optional and rely on your consent. They are separate from operational emails needed to verify, secure, administer and deliver the service. You can withdraw marketing consent at any time without affecting the alert service.

Google sign-in

If you choose Continue with Google, Google authenticates you and provides PremisesPulse with a verified email address and unique Google account identifier. PremisesPulse does not receive your Google password. Google processes information under its own privacy terms. Google sign-in is optional and an email-and-password account remains available.

Public-source records

Food-premises records and signals come from Food Standards Agency public data. PremisesPulse does not add personal email addresses or telephone numbers to those public records and does not sell scraped contact lists.

Who receives the data

GoDaddy hosts the public website and relevant mail services. Oracle Cloud hosts the API, database and automation. Stripe processes subscription payments. Google processes authentication data only when you choose Google sign-in. Email-delivery and operational suppliers may process only the information needed to provide their service under appropriate contractual terms.

International transfers

Some suppliers may process data outside the United Kingdom. Where this occurs, PremisesPulse will rely on an applicable UK adequacy regulation or appropriate contractual safeguards, together with supplementary measures where required.

Retention

Unconfirmed registrations are normally removed after 30 days. Active account data is retained while the service is provided. Inactive account data is normally removed or anonymised after 24 months unless a longer period is required for tax, payment, fraud-prevention, dispute or legal purposes. Expired account tokens and sessions may be retained briefly for security auditing before deletion. Consent and suppression records may be retained where necessary to demonstrate compliance and respect an unsubscribe request.

Your rights

Depending on the circumstances, you may have rights of access, correction, erasure, restriction and portability. You have a separate right to object to processing based on legitimate interests. You may withdraw marketing or analytics consent at any time without affecting processing that was lawful before withdrawal. Your secure account dashboard allows you to obtain a machine-readable copy of your profile and submit a rights request. You can also email privacy@premisespulse.co.uk.

We may need to verify your identity before acting. We normally respond within one month. PremisesPulse does not use personal information for solely automated decisions with legal or similarly significant effects. You can complain to the Information Commissioner's Office if you believe your data has been handled unlawfully.

Security

PremisesPulse uses HTTPS, restricted cross-origin access, security headers, private no-cache responses, secure and HTTP-only session cookies, CSRF protection, expiring single-use account tokens, rate-limited login attempts and scrypt password hashing. Session and reset tokens are stored as keyed hashes rather than readable secrets. Secrets are held outside the source repository. No internet service can guarantee absolute security.

Cookies and browser storage

When you sign in, PremisesPulse uses strictly necessary cookies to maintain your secure session and protect account changes against cross-site request forgery. These cookies are not used for advertising.

PremisesPulse also uses Google Analytics 4 to understand how the website is used, for example which pages are visited and how people reach the site. These analytics cookies are optional and are not set unless you choose “Accept analytics” in the cookie banner. Until you accept, nothing is requested from Google and no analytics identifiers are stored. If you decline, analytics stays off and only your choice is remembered in your browser's local storage so we do not ask again. Advertising and personalisation signals are disabled, and we do not use Google Analytics for advertising or to build marketing profiles.

Use Cookie settings in the footer to change your choice at any time. Withdrawing analytics consent stops further measurement and removes accessible Google Analytics cookies from this site.

Changes to this notice

The version date at the top identifies the notice shown when you sign up or start checkout. Material changes will be communicated where appropriate.