← Back

Privacy Policy

Last updated: 27 February 2026

1. Who we are

Eugene Merwe-Chartier trading as Registrum ("we", "us"). We are the data controller for personal data collected through registrum.co.uk and the Registrum API. Contact: support@registrum.co.uk

2. Data we collect

  • Email address — collected when you request an API key. Used to deliver your key and send service notifications.
  • API usage logs — endpoint called, timestamp, response time, company number looked up, whether the result was cached. Used for rate limiting, billing, and service improvement.
  • IP addresses — logged by our infrastructure for security and abuse prevention. Retained for 30 days.

3. Data we do NOT collect

We do not collect payment card details (handled entirely by Stripe). We do not track visitors with advertising cookies or share data with ad networks. We do not collect any data about the companies you look up — that data flows through from Companies House and is cached temporarily per our stated TTLs.

4. Legal basis for processing

We process your email and usage data under contract (to provide the API service you requested) and legitimate interests (to prevent abuse and improve the service).

5. Data retention

  • Email addresses and API keys: retained while your account is active, deleted within 30 days of account closure on request.
  • Usage logs: retained for 12 months, then deleted.
  • IP address logs: retained for 30 days.

6. Third-party processors

  • Supabase — database (EU region). Stores API keys and usage logs.
  • Railway — API hosting (EU region). Processes API requests.
  • Vercel — website hosting (global CDN). Processes website requests.
  • Stripe — payment processing. Receives billing details for paid plans.
  • Resend — transactional email. Used to deliver API keys.

7. Your rights (UK GDPR)

You have the right to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. To exercise any right, email support@registrum.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.

8. Cookies

This website does not use advertising or tracking cookies. We use only essential session cookies required for the website to function.

9. Changes to this policy

Material changes will be notified by email to registered users at least 14 days before taking effect.