Privacy Policy

Last updated: March 2026

1. Overview

This Privacy Policy explains how personal data is collected, used, and protected when you use Slate's public website, join the waitlist, search for a company or director, or view public report pages.

Slate is operated by Slate Labs Ltd, a company registered in the United Kingdom. For the purposes of applicable data protection law, Slate Labs Ltd is the data controller.

This policy applies to the current public release of Slate, as well as any available payment functionality. It will be updated as additional features are introduced.

If you have questions about this policy or how we handle your data, contact us at [email protected].

2. Information we collect

Waitlist and account data

  • Email address when you join the waitlist or create an account
  • Basic profile or contact information where provided

Payment and transaction data

  • Information required to enable payments and payouts via Stripe such as name, contact details, and transaction information
  • Limited transaction metadata such as amounts, timestamps, and status

Slate does not store full payment card details.

Search and report usage data

  • Search queries entered into the check feature
  • Reports viewed and related interactions

Technical data

  • IP address
  • Browser type and version
  • Device and operating system
  • Approximate timestamps and usage data

Public-source data

  • Company and director information displayed in report pages may be sourced from public records, including Companies House, or derived from those records

3. How we use your information

We use personal data to:

  • Operate and maintain the platform and its features
  • Enable payment processing and transaction flows
  • Communicate with users where requested or necessary
  • Improve the product and understand usage patterns
  • Prevent abuse, fraud, and misuse of the platform
  • Comply with legal and regulatory obligations

We do not use the platform to provide personalised advertising.

4. Legal bases for processing

Under UK GDPR, we rely on the following legal bases:

Legitimate interests

  • Operating, securing, and improving the platform
  • Analysing usage and preventing abuse
  • Processing publicly available company and director data to provide transparency and informational services

Consent

  • Where you choose to join the waitlist or opt in to communications
  • You can withdraw consent at any time, for example via unsubscribe links

Contract

  • Where processing is necessary to provide services you request, including payment functionality

Legal obligation

  • Where processing is required by law or regulatory requirements

5. Data sharing

We do not sell personal data.

We may share data with trusted service providers who support the operation of the platform, including:

  • analytics providers
  • hosting, infrastructure, and database providers
  • email delivery providers
  • payment processing providers

We use Stripe to process payments and related services. When you provide personal data in connection with payment features, that data is shared with Stripe and processed in accordance with Stripe's Privacy Policy: https://stripe.com/privacy.

We may also disclose data where required by law, court order, or regulatory request, or where necessary to protect the rights, safety, or security of Slate, users, or the public.

6. International data transfers

Some of our service providers may process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, such as:

  • adequacy regulations, or
  • standard contractual clauses

7. Cookies and tracking

We use cookies and similar technologies for:

Essential cookies

Required for core functionality and security

Analytics cookies

Used to understand how visitors use the platform and improve it

Where required, we will obtain your consent before placing non-essential cookies.

We aim to use privacy-preserving analytics settings where possible.

8. Data retention

We retain personal data only as long as necessary for the purposes described in this policy.

In practice:

  • Account and waitlist data is retained while relevant to the service or communications
  • Transaction data is retained as required for operational, legal, and regulatory purposes
  • Analytics and technical logs are retained for a limited operational period
  • Public-source report data may be cached to support performance and report generation

Where possible, data is deleted or anonymised when no longer required.

9. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Object to certain processing, including legitimate interests
  • Request restriction of processing in certain circumstances

These rights may also apply, where relevant, to individuals whose publicly available data appears in Slate reports, subject to applicable legal exemptions.

To exercise your rights, contact: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office.

10. Security

We take reasonable technical and organisational measures to protect personal data, including:

  • Encryption of data in transit using HTTPS
  • Access controls limiting data access to authorised personnel
  • Monitoring systems to detect and respond to unusual activity
  • Rate limiting and abuse prevention measures

No online service is completely secure. If you believe your data may be at risk, contact us immediately at [email protected].

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the product, our practices, or legal requirements.

The latest version will always be available on this page.

12. Contact

If you have any questions about this privacy policy or how we handle your data:

[email protected]

Slate Labs Ltd
United Kingdom