Skip to main content
CChallenge Council Tax Band
Legal

Privacy & cookies

Last updated: 5 June 2026.

1. What we collect

We collect the minimum necessary to deliver the product:

  • Postcode — to look up your Council Tax band and comparables.
  • Your name — supplied at checkout; used to fill the VOA proposal form (Part A and Part C).
  • Move-in date (optional) — supplied at checkout; used to determine the right challenge route and pre-fill Part A of the form.
  • Phone number (optional) — supplied at checkout; placed on Part C of the form so the VOA can contact you about the case.
  • Email address — supplied to Stripe at checkout, used to deliver your pack and for customer support.
  • Payment data — handled by Stripe. We never see your full card number.
  • Server logs — IP address, user agent, timestamps. Retained 30 days for security purposes.

2. What we don’t collect

We do not run third-party advertising trackers, do not sell or share your data with marketers, and do not require an account.

3. Where data lives

Order records are stored on Neon (PostgreSQL, AWS US-East-1 region). The transfer of UK personal data to the US is permitted under the UK Extension to the EU-US Data Privacy Framework (the “UK-US Data Bridge”), which the UK Government adopted in October 2023. Neon participates in the Data Privacy Framework. The application itself is hosted on Railway (EU region). Payments are processed by Stripe Payments UK Limited. Email is delivered by Resend. The AI cover-letter generation uses Anthropic’s API.

4. Cookies

We only set cookies strictly necessary for the site to function (e.g. CSRF, session). We do not set marketing or analytics cookies that require consent under PECR. If we add analytics in future we will use Plausible or a similar non-cookie analytics service.

5. Your rights

Under UK GDPR you may request access, correction, or deletion of your data; object to processing; and lodge a complaint with the ICO (ico.org.uk). Email [email protected]— we respond within 30 days.

One limit applies to deletion: we are legally required to keep a basic record of each transaction for 6 years (HMRC). Where that applies, we honour a deletion request by erasing your personal details — your name, phone number, move-in date, email address and the property address — and keeping only the minimal financial record described in section 6. That record no longer identifies you.

6. Retention

We keep a minimal financial record of each order — order reference, date, amount paid, Council Tax band and postcode district (e.g. “W14”) — for 6 years, to comply with HMRC rules on commercial record-keeping.

The personal details attached to an order — your name, phone number, move-in date, email address and the full property address captured during the lookup — are automatically anonymised 12 months after the order, and sooner on a valid deletion request. Anonymising leaves the financial record intact but removes anything that identifies you. Server logs (IP address, user agent) are kept for 30 days.

7. Children

The service is intended for adults aged 18+. We do not knowingly process children’s data.

8. Data controller

The data controller is Praxis Ventures Ltd (trading as Challenge Council Tax Band), Black Bull House, 353–355 Station Road, Bamber Bridge, Preston, PR5 6EE, United Kingdom. For data requests, email [email protected].