Privacy Policy
This policy explains, in plain English, what personal information ConsumerSuit collects, why, who we share it with, and the rights you have over it. It is written to meet the UK GDPR and the Data Protection Act 2018.
1. Who we are
ConsumerSuit ("we", "us") is a self-help tool that helps individuals in England & Wales understand and assert their consumer, tenancy, employment and similar rights. For data-protection purposes, ConsumerSuit is the data controller for the information described here.
Contact for any privacy question or request: [email protected].
2. The information we collect
If you create an account (Google sign-in)
When you sign in with Google we receive, from Google, your name, email address, profile picture and your Google account ID. We store these to create and identify your account. We never see your Google password.
When you use the tool
We process the content you submit — your description of a dispute, any documents or images you upload, and messages you send to the assistant — in order to generate your analysis, evidence map and draft documents.
If you subscribe to a paid plan
Payments are taken by Stripe, our payment processor. We do not see or store your card details. We store only a Stripe customer reference, your subscription ID, and its status (e.g. active or cancelled), so we know which plan you're on.
If you use a free checker (flight, parking, council tax)
If you ask us to keep you posted, we store the email address you give and the details of that specific claim, so we can send the confirmation and reminder you requested.
If you post on the feedback wall
We store the message (and optional name) you choose to post.
Automatically
To prevent abuse and protect our costs, our systems briefly note request timing and a rate-limit marker tied to your network address. We do not build advertising profiles.
3. Why we use it, and our lawful basis
| What for | Lawful basis (UK GDPR) |
|---|---|
| Creating your account and signing you in | Performance of a contract |
| Generating your analysis and documents | Performance of a contract |
| Taking payment and managing your subscription | Performance of a contract |
| Sending the confirmation and reminder emails you asked for | Consent (you can opt out anytime) |
| Preventing abuse and controlling our running costs | Legitimate interests |
4. Who we share it with
We use a small number of trusted service providers ("processors") to run ConsumerSuit. We share data with them only as needed to provide the service:
- Cloudflare — hosting, and the databases that store your account and saved data.
- Google — sign-in (only if you choose to sign in with Google).
- Stripe — payment processing.
- Resend — sending the confirmation and reminder emails.
- AI providers — to produce your analysis, the text you submit is sent to one or more AI services: Mistral, Google (Gemini), Anthropic (Claude), Groq, and Cloudflare Workers AI. It is sent solely to generate your result.
We do not sell your personal data, and we do not share it for third-party advertising.
5. Cookies
We use only the cookies needed to make the site work — there are no advertising or third-party analytics cookies:
- cs_sess — keeps you signed in (essential).
- cs_oauth_state — a short-lived security cookie that protects the sign-in flow (essential).
- cs_tier — remembers a plan preview (essential to show the right features).
6. International transfers
Some of our providers (for example Stripe, Anthropic and Groq) are based in the United States. Where data is transferred outside the UK, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent contractual protections.
7. How long we keep it
- Account data — for as long as your account is open. Delete your account and we remove it.
- Sign-in sessions — expire automatically after 30 days.
- Checker leads & feedback — kept while useful for the service, and removed on request.
8. Your rights
Under UK data-protection law you have the right to: access a copy of your data; correct it; have it deleted; restrict or object to how we use it; receive it in a portable format; and withdraw consent at any time. To exercise any of these, email [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
9. Children
ConsumerSuit is intended for adults (18+) and is not directed at children.
10. Changes to this policy
If we change this policy we'll update the date at the top. Significant changes will be made clear on the site.