Your privacy, explained.

01Who we are

This website is operated by PolicySnap Ltd, registered in England and Wales (company no. 17366222), registered office 124–128 City Road, London EC1V 2NX. We are registered with the Information Commissioner’s Office under reference ZC224572.

PolicySnap Ltd is the data controller for the information described in this policy. You can reach us about anything on this page at data@policysnap.io.

This policy covers our website, guides and email signups. It also sets out how we will handle documents and saved details when you use PolicySnap.

02What information we collect

We keep this to a minimum. What we hold depends on whether you simply read the site or choose to sign up.

Our waitlist and newsletter forms ask for your email address. They do not ask you to upload insurance documents or provide payment details.

03How and why we use it

We use your email address for the signup you chose. Waitlist addresses are used to tell you when PolicySnap launches. Newsletter addresses are used to send our guides and updates. We also use your address to manage your subscription and to answer any request you make about your information.

We rely on your consent for both signups: you gave us the address for that purpose, and every email we send includes an unsubscribe link that works immediately.

If you accept analytics, we use website usage information to understand how many people visit our pages and how many complete a signup. We rely on your consent for this, and you can withdraw it at any time using ‘Privacy choices’ in the footer. Your submitted email address is never included in the analytics events our website sends.

We use browser, network and request information to serve the site and to check that a form submission comes from a real browser. This helps us prevent automated abuse.

When you use PolicySnap, we will use the document or details you give us to run the check you asked for, and to show you the result.

We will anonymise and combine information into grouped counts and averages, such as the average policy price for an age band. The statistics we keep will not identify you or be linked back to you.

This website does not make insurance eligibility, pricing or cover decisions about you.

04The waitlist and newsletter

These are two separate choices. Joining the waitlist does not on its own subscribe you to the newsletter, and subscribing to the newsletter does not add you to the waitlist. Your consent is whichever form you actually used.

The waitlist

If you join the waitlist we store your email address together with information about how you reached the page, such as the campaign or link that brought you here. We use it for one purpose: telling you when PolicySnap launches.

The guides newsletter

If you subscribe to the newsletter we store your email address, the page you subscribed from, and the date and version of the consent wording shown on that form. Subscribing to the newsletter does not change or overwrite any waitlist information we already hold for you.

We use Loops, our email service provider, to store subscription information and send emails. You can withdraw your consent using the unsubscribe link in an email or by contacting us.

05Website analytics and security

Your analytics choice

Analytics is off until you turn it on. When you first visit we show a short ‘Your privacy choices’ notice with two equal options: ‘Accept all’, which turns on optional analytics, or ‘Reject all’, which keeps it off. Until you choose, and if you reject, nothing is loaded from PostHog or Google Analytics and no usage information is sent to either of them. You can keep browsing without choosing.

You can change your choice at any time using ‘Privacy choices’ in the footer of every page. If you withdraw acceptance, we act straight away in that browser: PostHog is told to stop, Google’s measurement code is told that consent is denied and is disabled, the Google cookies we can reach are removed, and no further events are passed to either service by us. Because code that has already loaded cannot be unloaded, any open tab where Google’s code was running is then reloaded so that it starts again with analytics off; if you are part-way through a form on that page, the reload waits until you have sent or cleared what you typed. We cannot see or control what already-loaded third-party code does in the short time before that reload.

We remember your choice — accepted or rejected — in a small first-party cookie for up to 180 days, after which we ask again. It records only the choice, the version of this wording and the dates, not who you are, and it is not used for analytics. On policysnap.io it is shared with www.policysnap.io so you only need to choose once. If your browser blocks this cookie we cannot remember your choice: analytics stays off by default, an acceptance applies only to the page you are on and ends when you leave or reload it, and we ask again on the next page.

PostHog

If you accept analytics, we use PostHog, hosted in the EU, to count page visits and confirmed signups. In your browser, PostHog uses identifiers held in memory rather than saved in cookies or local storage. Usage events are sent to PostHog for analysis. We do not enable automatic interaction capture or session recordings, and we do not attach your signup email address to these events.

Google Analytics

If you accept analytics, we also load Google Analytics through Google Tag Manager to measure visits and signups. Google’s consent signals are set to denied before the container loads and only analytics storage is then switched on; advertising storage, advertising data and advertising personalisation stay denied. Before you accept, the Google container is not loaded at all, so no cookieless measurement takes place either.

Hosting and security

The site is served through Cloudflare (cloudflare.com) and hosted on Lovable’s application hosting. Serving a page necessarily involves processing request information such as your IP address, browser type and the page requested. We rely on our legitimate interests in operating this website and protecting it and its visitors from misuse when we process information for hosting and security.

Both signup forms use Cloudflare Turnstile, which checks that a submission comes from a real browser and helps prevent automated abuse. We also load web fonts from Google Fonts, which means your browser makes a request to Google when a page loads.

Keeping account details separate

We will use reference tokens to keep account-identifying information separate from stored insurance details. The information needed to connect them will be held separately with restricted access. Details that can still be connected to you remain your personal information, and the retention periods and rights on this page apply to them.

We take care with the information we hold, but no website or online service can be guaranteed completely secure.

06Who helps us process information

We use a small number of providers to run this website. We share only what each one needs to do its job.

• Loops — stores waitlist and newsletter contacts and sends our emails. Loops privacy information
• Cloudflare — serves the site and provides Turnstile protection for our forms. Cloudflare privacy information
• Lovable — application hosting for this website. Lovable privacy information
• PostHog — product analytics, hosted in the EU. PostHog privacy information
• Google — Google Tag Manager, Google Analytics and Google Fonts. Google privacy information
• Anthropic — we will use Anthropic’s Claude API to extract information from documents under a zero data retention arrangement. Anthropic data retention information

These providers operate internationally, so information may be processed outside the UK. If you would like details of the arrangements that apply, please email data@policysnap.io.

07How long we keep information

Waitlist emails

Until you unsubscribe, or until the waitlist has served its purpose after launch, whichever comes first. Unsubscribing removes you from any future sends.

Newsletter subscriptions

We keep your newsletter contact details while you remain subscribed. After you unsubscribe, we keep only the minimum record needed to honour that choice and avoid sending further newsletter emails. You can ask us to delete your details at any time — see your rights and choices.

Uploaded documents

We will delete original documents within 28 days of upload, including when you choose to save details in your account.

Information used for a check

We will delete personal information collected or extracted for a check within 28 days of collection, unless you explicitly choose to save it in your account for future use.

Saved details

If you choose to save your details, we will keep them for future checks and renewals. We will delete your saved account information after 24 months of account inactivity. The original files you uploaded are still deleted within 28 days.

Grouped statistics

We may keep anonymised statistics for long-term analysis after the underlying personal information has been deleted.

Website analytics information

Our PostHog account currently shows a seven-year retention setting, but automatic expiry is not enabled. We therefore do not currently have a fixed automatic deletion deadline for these analytics events. We are working towards a 12-month retention period, using scheduled deletion and checks that removal has completed. This control is not yet in place.

Security information

Information processed by the security and hosting providers listed above is held by those providers under their own retention arrangements. If you would like to know more about a specific provider, please email us.

Your analytics choice

The cookie that remembers your analytics choice expires after 180 days at most.

08Your rights and choices

You can ask us to access, correct or delete your data at any time by emailing data@policysnap.io.

• Withdraw your consent. For emails, use the unsubscribe link in any email or email us. For analytics, use ‘Privacy choices’ in the footer. Withdrawing consent does not affect the lawfulness of processing based on that consent before it was withdrawn.
• Access, correct or delete. Ask us for a copy of what we hold about you, or ask us to put it right or remove it.
• Object to legitimate-interests processing. Where we process your information based on our legitimate interests — for example, for hosting and security — you can object at any time. We will then stop that processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms.
• Other rights. Depending on the circumstances, you may also be able to ask us to restrict how we use your information, to object to certain uses, or to receive it in a portable format.

We will always do what we can to honour a request. In some cases we may need to keep a limited record — for example, to make sure we do not email you again after you have unsubscribed.

09Contact us or make a complaint

For anything about your data, email data@policysnap.io and we will come back to you.

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to help first, but you can go to the ICO at any time.

10Changes to this policy

PolicySnap is still being built, so this policy will change as the service does. When we make a change we will update the date at the top of this page. If a change materially affects how we use information you have already given us, we will tell you.