Privacy Policy
Last updated: 12 October 2026
In Plain English
We collect what we need to print and post your letters and notices, take payment, keep you updated and handle any problems.
We share it only with the companies that help us do that, such as our printing partner, Royal Mail, Stripe and our email provider, and we never sell it.
Typed and template letters are checked automatically by an AI tool before payment, to stop abusive content. If yours is blocked, a person will review it if you ask.
We delete letter content after a set time. We keep the order and payment record for 6 years, because UK tax rules require it.
You can ask to see, correct or delete your data at any time by emailing info@postright.co.uk.
1. Who We Are
PostRight Ltd is the data controller for the personal data described in this policy, except where section 12 says we act for a business customer. Company number 17085271, registered in England and Wales. Registered office: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE. We are registered with the Information Commissioner's Office, reference ZC104939. Contact: info@postright.co.uk.
2. What We Collect
- About you as a customer: your name, email address, postal address, phone number if you give it, and your account login if you create one.
- What you ask us to send: the sender and recipient names and addresses, and the letter content, whether typed, built from a template or uploaded as a PDF.
- Landlord notices: the details you enter in the Section 8 or Section 13 forms. These include tenant names, the property address, rent, deposit and arrears details, the grounds and facts you rely on, your signature name and any joint landlord or agent details.
- Payment: the amount, the payment reference and the email given to Stripe. Stripe handles your card details; we never see or store them.
- Order progress: print job references, posting dates, Royal Mail tracking numbers and delivery events.
- Support, claims and complaints: what you tell us, our replies, and the outcome.
- How you use the site: pages visited, form steps reached and device type, and, if you accept Analytics, the advert or search that brought you. Google Analytics and Google Ads data is collected only if you accept those cookies. See our Cookie Policy.
- Safety and abuse prevention: the text checked by our automated content check, with your email and the IP address used at checkout, kept for 90 days. A coded form of your IP address is used to limit repeated use of our notice tools and kept for 30 days.
3. Why We Use It and Our Lawful Basis
| Purpose | Lawful basis |
|---|---|
| Print, post and track your order, and send order emails | Contract |
| Take payment, refund and handle chargebacks | Contract; legitimate interests (protecting against fraud and disputes) |
| Check typed and template letters for threats, abuse, hate speech or extortion before payment | Legitimate interests (keeping our service, our partners and recipients safe); see section 5 |
| Answer questions, complaints and claims, including claims with Royal Mail | Contract; legitimate interests |
| Keep order and payment records | Legal obligation (UK tax and company law) |
| Invite you to review us on Trustpilot after your order is posted | Legitimate interests (collecting genuine reviews). You can opt out at any time |
| Send tips, reminders and offers | Consent, which you can withdraw at any time by unsubscribing |
| Count site use to improve the site | Legitimate interests; with your consent for Google Analytics, Google Ads and advert tracking |
| Comply with the law, court orders and lawful requests from the police | Legal obligation |
4. Sensitive Information
Letters often contain sensitive details, such as health information, National Insurance numbers, details of a prisoner, or allegations of crime or anti-social behaviour in a possession notice. We process these only to check, print and post the letter you asked us to send, and to keep the records described in section 9. Where your letter relates to a legal claim, we rely on the condition that the processing is needed to establish, exercise or defend legal claims. Please only include the sensitive details your letter needs.
5. Automated Checks
Before you pay, any letter you type, or build from a template, is checked automatically by an AI tool provided by Anthropic. The check looks only for threats, harassment, hate speech, profanity, blackmail or extortion. Letters to prisoners are checked instead for escape planning, criminal activity, threats to prison staff and sexually explicit content. If the check flags your letter, you cannot pay for it until it is changed or reviewed. You have the right to ask for a person to review that decision: email info@postright.co.uk with the reference shown on screen, and we will reply within 2 working days. Uploaded PDFs are not checked by AI.
6. Who We Share It With
| Recipient | What they receive | Why | Where |
|---|---|---|---|
| Intelliprint, run by Innovate (Print, Direct Mail and Fulfilment Ltd), Leeds | Your letter and addresses | Printing, enclosing and handing to Royal Mail | UK |
| Royal Mail | The sealed item; order and tracking details if we raise an enquiry or claim | Delivery, enquiries and claims | UK |
| Stripe | Payment and order amount, your email | Taking payment and refunds | UK, EU and US |
| Supabase | All order, account and notice data | Database, file storage and logins | UK (London) |
| Netlify | Website traffic and technical logs | Hosting the website | US and other regions |
| Resend | Your email address and the email content, including any attached letter | Sending our emails | US |
| Anthropic | The text of typed and template letters, and the explanation you write in the Section 8 form if you ask us to improve it | Automated checks and the optional rewrite tool. Anthropic may not train its models on this data | US |
| Trustpilot | A copy of the "posted" email: your email, your name, the recipient's name, the order number and any tracking number | Sending one review invitation | EU |
| Site usage and order value, only with your consent | Analytics and advert measurement | US | |
| postcodes.io | The postcode you enter | Checking that a postcode exists | UK |
Rocket.new, the platform we use to build and run our website, can access our code and settings, and counts visits to our pages (pages viewed, device, country and where visitors came from). We may also share data with our professional advisers, insurers, the police or a court where the law requires it, and with a buyer of our business. We never sell personal data.
7. International Transfers
Some of the companies above process data outside the UK. Where a country does not have a UK adequacy decision, we rely on the UK-US data bridge where the company is certified, or on the ICO's International Data Transfer Agreement or Addendum. Email us for details.
8. Emails We Send
Order emails, such as confirmations, posting updates, address problems and claim updates, are part of the service and are sent whatever your marketing choice. Order confirmation emails attach a copy of your letter for your records. Marketing emails, and reminders about unfinished letters, go only to people who ticked the box to receive them, and every one has an unsubscribe link. After an order is posted, Trustpilot may email you once to ask for a review. To stop that, email us or use Trustpilot's unsubscribe link.
9. How Long We Keep It
| Data | How long |
|---|---|
| Letter content and PDFs, standard letters | 6 months after posting, then deleted |
| Landlord notices, certificates of service and signed notice files | 6 years after posting, then deleted, because a claim about a notice can be brought for up to 6 years |
| Future Self letters | Until posted, then as standard letters |
| Order and payment record (names, addresses, service, tracking, amount; never content) | 6 years after the end of the financial year of the order |
| Unpaid checkouts | 48 hours; uploaded files 7 days |
| Unpaid landlord notice answers and signatures | 30 days |
| Saved drafts | Until you delete them, place the order or delete your account, or 12 months without use |
| Account details | Until you delete your account, or 3 years without use |
| Support emails, tickets and complaints | 2 years after they are closed |
| Claims and refunds | 6 years, as part of the payment record |
| Automated check records (the text checked, your email and IP address) | 90 days |
| Coded IP records for our notice tools | 30 days |
| Site statistics | 24 months |
| Marketing choice | While you are subscribed; after you unsubscribe we keep your email only to make sure we do not email you again |
We keep data longer only where we need it for a legal claim or a legal obligation. Your own email inbox keeps copies of the emails we sent you; we cannot delete those.
10. Your Rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or send it to you in a portable format. You can also withdraw consent, and ask for a person to review an automated decision. We reply within one month. We may ask you to confirm your identity first. Some data we must keep, such as the order and payment record; we will tell you if that applies.
11. Deleting Your Account
When you delete your account, we delete your login and saved drafts straight away, and remove your name, email and postal address from your past orders. Letter content and notice files are then deleted on the schedule in section 9, and the order and payment record is kept for 6 years without your contact details. Orders you placed as a guest are not linked to your account; email us to include them.
12. Business Customers
If you order on behalf of a business, we act as your processor for the letter content and recipient details, and our Business Customer Data Terms apply.
13. If You Received a Letter or Notice Sent Through PostRight
Someone used our service to send you post. We received your name, your address and the content of the letter from them. We used these only to print and post it, and we keep them for the periods in section 9. We do not contact you or use your details for anything else. You have the same rights as anyone else under section 10. For questions about why the letter was sent, contact its sender: we cannot discuss the content of their letter with you. We cannot block a sender, but if a letter sent through us threatened or harassed you, tell us and we will look into it and may refuse that sender's future orders.
14. Children
Our service is for people aged 16 or over. If we learn that someone under 16 has used it, we will delete their data, except any order record we must keep by law.
15. Security
Data is encrypted in transit and stored with providers that encrypt it at rest. Access to customer data is limited to our director and the providers in section 6, and our partners are bound by confidentiality and data protection terms. If a breach is likely to put you at risk, we will tell you and the ICO as the law requires.
16. Complaints
If you are unhappy with how we have handled your data, email info@postright.co.uk with "Data protection complaint" in the subject line, or write to us at our registered office. We will acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
17. Cookies
See our Cookie Policy for the cookies and similar technologies we use. To change your choices, use the Cookie settings link at the bottom of any page.
18. Changes
When we change this policy we update the date at the top. If a change is significant and you have an account or an open order, we will email you.