Ryan Stephens, trading as KnockFirst, is the data controller for this service. KnockFirst is a sole-trader business based in Southport, England. Email: stephensr2002@gmail.com.
This policy explains how we use personal data when you visit the KnockFirst website, buy a project pack, subscribe to weekly alerts, contact us, receive a business introduction from us, or appear in a public planning record used by the service.
Your name, work email, postcode, radius and trade are needed to prepare and deliver the service, and payment details are needed for a paid order. If you do not provide them, we cannot fulfil the order. Receiving optional marketing is never a condition of buying.
We receive customer details directly from customers. Project and business information comes from public council planning registers, Companies House, the Food Standards Agency register, business websites and other public business sources. Location matching may use Postcodes.io, and planning searches may use PlanIt as an index of council records. We link back to the underlying public record wherever practical.
We use planning information in its project and business context. We do not intentionally add private contact details or market to private individuals merely because their name appears on a planning application. Our packs may identify an applicant or professional agent where that identity is relevant and present in the public record. You can ask us to correct, restrict or remove personal data associated with you; we will assess the request against the source record and our legal obligations.
Paying business customers receive the project information in their selected pack or digest. This can include an applicant or professional agent's name, business role and company where those details are relevant and published in the source record.
We use Render for hosting and storage, Stripe for checkout and billing, and Resend for service email delivery. These suppliers receive only the information needed for their role under their data-protection terms; Stripe may also act as an independent controller for some payment and fraud-prevention activity. We may disclose information to professional advisers, regulators, courts or public authorities where reasonably necessary or legally required. We do not sell customer or prospect contact details to third parties.
Some suppliers may process data outside the UK. Where they do, we require an appropriate safeguard recognised by UK data-protection law, such as UK adequacy regulations or approved contractual protections. Contact us if you would like more information about the safeguard used for a particular supplier.
KnockFirst does not currently set non-essential analytics or advertising cookies. Stripe and any external site you visit from a link may use their own cookies under their own privacy information.
Software rules help us filter and rank planning records by distance, trade and likely project relevance. This does not make a decision about a person that produces legal or similarly significant effects.
Depending on the circumstances, you may have rights to access, correct, erase, restrict or receive a copy of your personal data, and to object to its use. You have an absolute right to object to direct marketing. Where we rely on consent, you can withdraw it at any time. These rights can be subject to legal exceptions, including records we must retain.
To exercise a right, email stephensr2002@gmail.com. We may need to verify your identity. You can also complain to the Information Commissioner's Office.
We use proportionate technical and organisational measures to protect information, while recognising that no online service can guarantee absolute security. We will update this policy when the service or our legal obligations materially change and will post the new date at the top.