Request and "Notify me" forms
When you send a request we store exactly these fields, a single record per email address:
- Email address (stored lower-case)
- Request type (city, market, alert or other)
- The city, market or trade you asked about
- Your optional note
- That you ticked the consent box, and which consent wording you saw (version
consent-v1) - The page you sent it from
- How many times you have sent a request, and the date and time of your first and latest request
- Whether you flagged interest in paid priority alerts (optional)
If you send another request with the same email, we keep only your latest request and update the count and latest date.
Why: only to tell you when what you asked for is available. The legal basis is your consent (UK/EU GDPR), and you can withdraw it at any time.
How long: deleted automatically 12 months after your latest request, by a daily clean-up job. Sooner if you ask.
Email: we don't send any emails yet. We will only email you about what you requested, never marketing, and never without your consent.
Spam protection (rate limiting)
To stop abuse, each form submission and each counted click creates or updates a short-lived record holding a one-way hash of your IP address combined with a private salt value, a time window and a count. We never store your IP address itself, and the hash isn't linked to your email, your request or any click total.
How long: these records are deleted automatically after 1 day.
Click counts
We count clicks on request buttons and on links to official permit records, as daily totals per type. Nothing else is stored with these totals: no IP, no browser details, no page address, no cookies, no identifier. These totals contain no personal data. To prevent abuse, clicks pass through the same short-lived rate-limit record described above.
Cloudflare Web Analytics
We use Cloudflare Web Analytics to count page views and measure page speed. It doesn't use cookies or local storage, doesn't track you across sites, and only reports aggregate numbers to us. Cloudflare processes this data on our behalf.
Your browser
If you choose light or dark mode, your browser remembers it under the localStorage key echopermits-theme. If an older permitiq-theme value exists from before the rename, it is copied to the new key once and then deleted. It stays on your device and is never sent to us. Clear your site data to remove it.
Hosting
The site runs on Cloudflare, which processes standard connection data to deliver pages and protect against attacks, under Cloudflare's own privacy terms.
See or delete your data
To see, correct or delete what we hold about you, email info@echopermits.com.
We don't sell, rent or share your details with anyone.
Data sources →
