Privacy notice

The publisher of Licence File, Licence File team. It controls the data this notice covers. Privacy requests go to hello@licencefile.com.

One line in the server’s access log:

• Fields: which IP address asked, when, for which page, the reply’s status code and size, plus the browser’s user-agent text.
• Left out: the referring page, a name and an email address.
• Errors: a failed request can also add an error-log entry with the IP address and request details.
• Purpose: a secure site, with faults found and fixed.
• Lawful basis: legitimate interests, the publisher’s interest in a secure, working site.
• On file for: 14 days, then deleted.

Analytics never run here, and cookies are never set, so that log line is the only record kept of a visit. The cookies page covers browser storage.

Kept on file, for a set time. An email brings its sender’s address, any display name and the message itself, and nothing else about the sender is kept.

• Use: a reply, and action on a report, such as a fresh read of a casino’s terms.
• Lawful basis: legitimate interests, in answering mail and keeping pages accurate.
• Kept for: 12 months from the day the matter is closed, and deleted after that.
• On the site: a correction never names the person who reported it.

A hosting provider and Cloudflare, Inc., both acting for the publisher:

• Hosting provider: rents out the server that holds the site and its logs.
• Cloudflare, Inc.: a United States company that carries every request, and sees the visitor’s IP address and request details on the way.
• DNS: Cloudflare also runs the domain’s DNS. It forwards the mailbox’s email to an inbox at a mail provider.
• Transfers: for data reaching Cloudflare in the United States, Licence File relies on the UK Extension to the EU-U.S. Data Privacy Framework, under which Cloudflare is certified.

Nothing is sold. Nor is anything rented or shared for marketing. Decisions about readers are never automated, and no profile is built.

UK data protection law gives these rights over every email sent to the mailbox and the server logs:

Access

• What it gives: confirmation that data is held, and a copy of it.

Correction

• What it gives: inaccurate data, challenged and put right.

Erasure

• What it gives: deletion, which the publisher must carry out in some circumstances.

Restriction

• What it gives: limits on use, in some circumstances and sometimes only for a period.

Objection

• What it gives: a halt to processing that rests on legitimate interests, where the circumstances require it.

Portability is different. It covers only data held by consent or under a contract, so it does not arise here.

To make a request, write to the address above. For a log entry, include the IP address used and an approximate visit time, since a log line holds no name.

One IP address can serve several people. Such a request may need more detail.

To the publisher first, at the same address. Since 19 June 2026, an organisation must run a complaints process and acknowledge a complaint within 30 days. The 30 days cover the acknowledgement only.

Then comes the investigation. It must run without undue delay, and the complainant must be kept informed throughout and then told the outcome.

The UK regulator is the Information Commission (ICO). It takes complaints at any time, but recommends letting the organisation finish its own handling first. Its complaints guidance explains the steps.