Privacy notice
UK Rules is operated by Mr Blake Dokubo, trading as Blake's Tec Solutions & Co, who is the data controller. Contact: info@blakestecsolutions.info. Registered with the Information Commissioner's Office (ICO), registration number ZC071808.
Last updated: 14 October 2026. Back to pricing
What we collect and why
Subscribers
If you subscribe to an API key plan we keep your email address and your Stripe customer and subscription IDs, so we can give you your key, count your usage and manage your plan. We store only a one-way hash of your API key, not the key itself. We never see or store your card details: Stripe handles those.
Lawful basis: contract (providing the plan you signed up for).
Call logs
For every call we record the time, which tool or endpoint was used, how it was paid for (free, API key plan or x402) and any x402 amount, whether it succeeded, how long it took, and the name of the client software (the MCP client name or the user-agent text it sends). The rule key you asked for is recorded; the company number you check is not. We do not store IP addresses, and we do not record API keys, wallet addresses, email addresses or the contents of responses.
Our hosting provider, Cloudflare, also keeps its own request logs for a short period so we can fix problems. Those logs can include technical details of a request, such as the IP address. We do not use them for anything else.
Lawful basis: legitimate interests (running, securing and improving the service, and counting usage and revenue).
Company data (business checks)
When you run a business check or company search we look up the public Companies House register. That includes the names of current company officers and persons with significant control, which is personal data about those people. We keep a copy (names, roles and appointment dates only) in a cache for up to 24 hours, so we do not overload Companies House. The text of a company search is stored as the cache key for the same period. We do not use this data for anything else.
Lawful basis: legitimate interests (providing business checks from public information).
VAT checks
VAT check: coming soon. Once it is switched on, if you include a VAT number, we send it to HMRC and return the result to you. Until then a VAT number you include is not sent anywhere. VAT check results are not stored by us.
Monitoring and alerts
We check the official web pages that our rates and deadlines come from, and keep a record of when each page last changed (a date or a fingerprint of its text) and, for a changed page, a short note of what changed. This is public information, not personal data. We also record, in our call logs, whether a call failed because of a fault on our side, so that we can spot outages. If something needs attention we email an alert to the owner's own address through Brevo. Those emails contain only counts and public web addresses, never customer details.
Lawful basis: legitimate interests (keeping the service accurate and running).
Admin sign-in protection
The private admin area (for the owner only) locks sign-in for 15 minutes after 5 failed attempts from one IP address. To do this we keep a one-way, keyed hash of the IP address (not the address itself), cleared daily.
Lawful basis
UK data protection law requires us to have a lawful basis for each use of personal data. Ours are:
- Contract: subscribers and paying callers. We need your email address and Stripe IDs, and your payment, to provide the plan or call you paid for.
- Legitimate interests: call logs, security, admin sign-in lockout, and business checks. We have a real interest in running, securing and improving the service, protecting it from abuse, and helping customers check who they are dealing with. We have considered the effect on people and keep what we hold to a minimum.
- Legal obligation: keeping billing records for 6 years, as tax and accounting law requires.
People named in business checks
A business check shows public information about a company's officers and persons with significant control (PSCs): their names, roles and appointment dates. We show it to help our customers check who they are dealing with. The source is the Companies House public register. We use each result for up to 24 hours, and a daily clean-up job then deletes expired copies. If you are named in a check, you have the same rights as anyone else (see "Your rights" below): email info@blakestecsolutions.info. We cannot change what Companies House publishes, so to correct the register itself you need to contact Companies House.
Who else handles data
These services process data for us, or are public sources we read:
- Stripe: takes card payments and holds your payment details, email and subscription.
- Supabase: our database (subscriber records, call logs, the 24-hour cache). Data is stored in Ireland (EEA).
- Cloudflare: hosts the service and delivers requests to it, processing them on its worldwide network.
- Brevo: sends the owner's alert emails. It receives only the owner's email address and the text of the alert, with no customer data.
- Coinbase's x402 facilitator: verifies and settles crypto payments made per call. Payments are on a public blockchain, which is outside our control.
- Companies House and HMRC: public data sources we query for business checks. They are not processors for us.
Transfers outside the UK
Supabase stores our data in Ireland, in the European Economic Area, which the UK recognises as adequate under UK adequacy regulations. Cloudflare processes requests on its worldwide network, and Stripe processes data in the UK, EU and US. These transfers are covered by the UK adequacy regulations, the UK-US data bridge, and the UK International Data Transfer Agreement (IDTA) or UK Addendum in their data processing agreements.
How long we keep it
- Subscription records (email, Stripe IDs): while the plan is active, then up to 6 years afterwards for accounting and tax records.
- Call logs: 12 months. A daily clean-up job deletes older logs.
- Companies House cache: used for up to 24 hours. The same daily clean-up job deletes older entries.
- Backups: a weekly backup of our data tables (including subscriber emails) is kept for 8 weeks in a private Cloudflare R2 bucket, then deleted. A record you ask us to delete can remain in a backup for up to 8 weeks.
- VAT check results: not stored.
- Source change records (the monitoring notes described above): closed ones are deleted after 12 months.
- Cloudflare request logs: kept by Cloudflare for a short period.
Your rights
You can ask us to give you a copy of your data, send it to you in a portable format, correct it, delete it, or stop using it in a way you object to. To use any of these rights, email info@blakestecsolutions.info. We will reply within one month.
Deleting your data cancels your subscription and API key and removes your email address from our records. Stripe keeps billing records as the law requires, and we keep the Stripe IDs that link to them for accounting.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk.
What we don't do
We do not sell customer data or share it with anyone for marketing. We do not use advertising or tracking cookies, and the public pages set no cookies. (The private admin area sets a sign-in cookie for the owner only.)