1. Who controls your information
Statutrak's data controller details are:
- Legal name: Dong Li
- Operator: Individual
- Trading name: Statutrak
- Address: Room 804, Building 8, Huafa Longyuewan, Weihai, Shandong Province, People's Republic of China
- Privacy contact: hello@statutrak.co.uk
This support email is verified for Statutrak and is used for privacy, security, billing and support requests. A Data Protection Officer has not been appointed and is not applicable to the current operation.
2. Information we process
Information you provide
- Your email address for Magic Link sign-in, account messages and requested reminders.
- Company names or company numbers that you search, and the companies you choose to monitor.
- Messages and details that you send to customer support.
- Where you buy a plan, Waffo Pancake customer, order and subscription identifiers, plan and subscription status, payment or renewal status, and relevant amount and currency metadata needed to provide the subscription.
Public company information
Search results may include company, officer, director and individual PSC information supplied by the public Companies House register. Statutrak does not ask you to submit an identity document, passport, date of birth or home address for this service.
Information generated by the service
The service and its hosting infrastructure may generate request time, IP address, browser or user-agent information, and security or diagnostic logs. Statutrak does not store passwords, full payment-card numbers, precise location data, health data or advertising profiles. The site also uses Microsoft Clarity to collect website analytics; section 6 explains the cookies and information involved.
3. Why we use information
- Provide the service: search public records, show compliance information and operate monitoring features on the basis of contract performance.
- Account and authentication: send Magic Links and maintain account access on the basis of contract performance and, where appropriate, legitimate interests.
- Reminders: schedule and send reminder emails that you request, on the basis of contract performance.
- Billing and entitlements: recognise a paid plan and maintain subscription access, on the basis of contract performance.
- Security and reliability: detect abuse, protect users and diagnose failures, on the basis of legitimate interests.
- Legal compliance: keep records or respond to lawful requests where required by a legal obligation.
We do not use your email address for marketing unless we have an appropriate consent or another lawful basis. We do not sell personal information.
4. Payments
Waffo Pancake is the payment processor and Merchant of Record for Statutrak subscriptions. Waffo Pancake handles complete payment-card details through its own checkout and payment systems. Complete card numbers are not stored on Statutrak servers. Statutrak receives or stores only the non-sensitive customer, order, subscription, plan, payment-status and renewal metadata needed to provide the service and support billing.
5. Service providers and data sources
We use the following providers and data sources as part of the service:
- Vercel: website hosting and application infrastructure.
- Microsoft Clarity: website analytics and session replay used to understand how the site is used (see section 6).
- Supabase: database and authentication services.
- Resend: transactional email delivery.
- Waffo Pancake: payment processing, Merchant of Record services and subscription billing.
- Companies House: the public company register source used for compliance information; Companies House is not a Statutrak data processor.
These providers may process information in multiple jurisdictions. Where required, appropriate contractual and legal transfer safeguards are used by the relevant provider. Each provider may also process information under its own terms and privacy notices.
6. Cookies and tracking
Statutrak uses essential session cookies for Supabase Auth and account continuity; these are needed to sign in and to keep an account signed in.
We also use Microsoft Clarity, a website analytics service provided by Microsoft, to understand how the site is used and to fix pages that are confusing. Clarity sets first-party cookies in your browser (_clck and _clsk) that recognise a returning browser and connect the pages in a single visit. It records pages viewed, clicks, scrolling and approximate browser, device, country and network information, and may generate session replays and heatmaps. We do not send Clarity your name, email address, account identifiers or payment details, and we do not use Clarity for advertising or to build advertising profiles.
Microsoft processes this information under its own terms, including the Microsoft Privacy Statement at privacy.microsoft.com/privacystatement. You can block or delete these cookies in your browser settings; the service continues to work without them, and while they are blocked Clarity cannot record your visit.
7. How long we keep information
- Account profile and authentication linkage: for the active account lifetime and up to 90 days after a verified deletion request.
- Monitored-company and reminder records: while active and up to 90 days after monitoring stops or account deletion.
- Support correspondence: 24 months after the matter is closed.
- Security and diagnostic logs controlled by Statutrak: normally up to 30 days, or up to 12 months when retained for a documented security or fraud incident.
- Statutrak subscription and entitlement metadata: for the active subscription lifetime and up to 24 months after it ends, unless a longer period is required by law.
- Waffo Pancake transaction records: retained by Waffo under its own legal, tax and payment obligations and privacy terms.
Retention periods may be extended where necessary to establish, exercise or defend legal claims, prevent fraud or meet a legal obligation.
8. Your rights
Subject to applicable law and its conditions, you may request access to your information, correction of inaccurate information, deletion, restriction of processing, portability of information, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time; withdrawal does not affect processing that occurred before withdrawal or processing based on another lawful basis.
Send a request to hello@statutrak.co.uk from the relevant account email where possible. We aim to respond within 30 calendar days. We may need to verify your identity before completing a request. You may also complain to the data-protection supervisory authority in the country where you live, work or believe an infringement occurred.
9. Security
We use access controls, authentication protections and reasonable technical and organisational measures for the information we process. No online service can guarantee absolute security. If you believe your Statutrak account or personal information has been compromised, contact hello@statutrak.co.uk promptly.
10. Children
Statutrak is intended for people aged 18 or over. We do not knowingly offer the service to children under 18 or intentionally collect their personal information.
11. Changes to this policy
We may update this policy when our service, providers or legal obligations change. For a material change, we will aim to give at least 15 days' notice by email or on the website where appropriate. The date above identifies the current version.
12. Contact
Questions, rights requests and privacy or security concerns should be sent to hello@statutrak.co.uk.