Privacy Policy

Last updated: 10 April 2026

1. Data Controller

Infonova Solutions Ltd is the data controller for information processed through EIAScreen. Contact: hello@infonovasolutions.com

2. What Data We Collect

We collect minimal data necessary to provide the service:

  • Site coordinates: latitude and longitude you select on the map
  • Project parameters: project type and site area you provide
  • Payment data: processed by Stripe; we do not store card details
  • Technical data: IP address, browser type, collected via standard server logs

We do not require account creation, collect names, email addresses, or personal identifiers for the free screening tier.

3. Lawful Basis for Processing

Under UK GDPR, we process your data on the following bases:

  • Contract: processing site coordinates is necessary to deliver the screening service you requested
  • Legitimate interest: server logs for security and service improvement

4. Third-Party Services

We share data with the following third parties to deliver the service:

  • Stripe: payment processing (subject to Stripe's Privacy Policy)
  • Vercel: hosting and serverless functions
  • Government APIs: Natural England, Environment Agency, Historic England, planning.data.gov.uk (coordinates only)
  • OpenStreetMap Nominatim: reverse geocoding (coordinates only)

We do not sell, rent, or share your data with third parties for marketing purposes.

5. Data Retention

Screening results are generated in real-time and not stored on our servers beyond the duration of the request. Payment records are retained for 7 years in accordance with HMRC requirements. Server logs are retained for 30 days.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing based on legitimate interest
  • Lodge a complaint with the ICO (Information Commissioner's Office)

To exercise these rights, contact us at hello@infonovasolutions.com.

7. Cookies

EIAScreen uses localStorage to track free tier usage (a simple counter, no personal data). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. International Transfers

Our hosting provider (Vercel) may process data in data centres outside the UK. Where this occurs, appropriate safeguards are in place under UK GDPR.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.