Legal
Last updated: 10 June 2026
We collect only what is needed to run your check and deliver your report. Uploaded files are deleted within 7 days. We do not sell your data.
Before You Pay ("we", "us", "our") is operated by Phillips. and is accessible at beforeyoupay.uk. For the purposes of UK GDPR, we are the data controller for personal data you provide when using this service.
Contact: hello@beforeyoupay.uk
| Data | Why we collect it | Legal basis |
|---|---|---|
| Trader name, location, trade type | To run the background check against public records | Contract — needed to deliver the service |
| Name of person who gave the quote (optional) | To search the individual insolvency register | Contract — needed to deliver the service |
| Uploaded quote file (PDF, photo, or text) | To scan the quote for fraud risk patterns | Contract — needed to deliver the service |
| Your email address | To deliver your report | Contract — needed to deliver the service |
| Payment data (card details) | To process payment | Contract — handled entirely by Stripe; we never see your card number |
| IP address and browser data | Standard server logs for security and debugging | Legitimate interests |
| Data type | Retention period |
|---|---|
| Uploaded quote files | Deleted within 7 days of your check |
| Report content (stored temporarily for retrieval) | Deleted within 7 days of your check |
| Email address | Deleted within 30 days of report delivery unless you contact us |
| Payment records | Retained for 7 years as required by UK financial record-keeping law (held by Stripe) |
| Server logs (IP, browser) | Up to 90 days, then deleted automatically |
We use the following third-party services to operate Before You Pay. Each is a processor acting on our instruction:
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email address and payment data (card details handled by Stripe directly — we never receive your card number) |
| Resend | Transactional email delivery | Your email address and the report content |
| Netlify | Website hosting and serverless functions | Request data including IP address; processed in the EU/US under standard contractual clauses |
| Supabase | Trader database (aggregated public records only) | Trader name, postcode district, trade type — no personal data about you |
| Anthropic (Claude API) | AI-assisted quote and public records analysis | Quote content and public records data submitted for analysis; not used to train Anthropic models under API terms |
| Companies House API | Registered business lookup | Trader name and postcode — public records query only |
We do not sell, rent, or share your personal data with any third party for marketing purposes.
Before You Pay uses only essential cookies required to process your payment securely (set by Stripe). We do not use advertising, tracking, or analytics cookies.
You have the right to:
To exercise any of these rights, contact us at hello@beforeyoupay.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.
All data is transmitted over HTTPS. Uploaded files are stored in isolated, access-controlled storage and deleted automatically. We do not store payment card details at any point — all card data is handled directly by Stripe's PCI-compliant infrastructure.
We may update this Privacy Policy from time to time. The current version is always available at beforeyoupay.uk/privacy. We will not reduce your rights under this policy without clear notice.
For any privacy-related questions or to exercise your rights, contact us at hello@beforeyoupay.uk.