Doorstep Score

Privacy Policy

Draft for legal review. Last updated 17 October 2026.

Daryl Bleach is the data controller for Doorstep Score. Questions about your data go to hello@doorstepscore.com.

What we collect, and why

The business name and town you type, your website and your type of business.
We need them to run the check, and keep them with the results.
Your Google Maps place ID.
So we can fetch your listing from Google again when you open your report. We keep the ID only, never Google’s details.
Our results for your website and the registers.
Including short extracts (up to 200 characters) from your own website and our Companies House and ICO results.
Your first name and email address.
We ask for them before showing your score so we can send you the report, and let you open it again. This is a service email, sent because you asked. Only if you tick the box do we also send occasional tips.
Whether you ticked the box for tips.
With when you ticked it, the wording you saw, where you saw it, and a one-way hash of your IP address. This is our record of your consent. The box is never ticked for you and the report doesn’t depend on it.
Quotes you ask for.
So we can reply about them.
Rate-limit counters.
Keyed on a hash of your IP address and kept for up to a day, to stop abuse.

Our legal bases

Doing what you asked (the check, the report and any quote). Your consent (tips emails). Our legitimate interest in keeping the service secure.

Google

We use Google Maps Platform to show your Google listing. Google’s details are requested live when a report loads and shown to you. We don’t store, cache or email them. Google’s own handling of data is covered by the Google Privacy Policy, which this policy includes by reference. Use of Google Maps content is covered by the Google Maps/Google Earth Additional Terms of Service.

Emails

If you ticked the box, we send about one email a week for three weeks with tips for your score band. Every one has a one-click unsubscribe link. If you unsubscribe, we keep a one-way hash of your address so we don’t email you again by mistake.

Who we share it with

Our hosting provider, Cloudflare, and our email delivery provider once it’s switched on. Both act only on our instructions. We don’t sell your data or share it for anyone else’s marketing.

How long we keep it

Checks where nobody asked for the full report.
Deleted after 90 days.
Your first name, email and report.
Deleted 24 months after you last used the service, or straight away if you ask.
Unsubscribes.
Kept as a hashed record so we keep to it.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or withdraw consent at any time. Email hello@doorstepscore.com. You can also complain to the Information Commissioner’s Office at ico.org.uk.