Privacy Policy
Last updated: 10 April 2026
1. Data Controller
Infonova Solutions Ltd is the data controller for information processed through EIAScreen. Contact: hello@infonovasolutions.com
2. What Data We Collect
We collect minimal data necessary to provide the service:
- Site coordinates: latitude and longitude you select on the map
- Project parameters: project type and site area you provide
- Payment data: processed by Stripe; we do not store card details
- Technical data: IP address, browser type, collected via standard server logs
We do not require account creation, collect names, email addresses, or personal identifiers for the free screening tier.
3. Lawful Basis for Processing
Under UK GDPR, we process your data on the following bases:
- Contract: processing site coordinates is necessary to deliver the screening service you requested
- Legitimate interest: server logs for security and service improvement
4. Third-Party Services
We share data with the following third parties to deliver the service:
- Stripe: payment processing (subject to Stripe's Privacy Policy)
- Vercel: hosting and serverless functions
- Government APIs: Natural England, Environment Agency, Historic England, planning.data.gov.uk (coordinates only)
- OpenStreetMap Nominatim: reverse geocoding (coordinates only)
We do not sell, rent, or share your data with third parties for marketing purposes.
5. Data Retention
Screening results are generated in real-time and not stored on our servers beyond the duration of the request. Payment records are retained for 7 years in accordance with HMRC requirements. Server logs are retained for 30 days.
6. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing based on legitimate interest
- Lodge a complaint with the ICO (Information Commissioner's Office)
To exercise these rights, contact us at hello@infonovasolutions.com.
7. Cookies
EIAScreen uses localStorage to track free tier usage (a simple counter, no personal data). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
8. International Transfers
Our hosting provider (Vercel) may process data in data centres outside the UK. Where this occurs, appropriate safeguards are in place under UK GDPR.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.