Legal

Privacy Policy

The Devil's Advocate (devils-advocate.co.uk) · Last updated: July 2026

Who We Are

The Devil's Advocate is operated by Keiron Dennie, a sole trader based in West Sussex, United Kingdom.

Contact: hello@devils-advocate.co.uk

What Information We Collect

Information you provide directly:

• Business details you enter into our analysis forms (business name, location, financial information, and your answers to our questions)
• Your email address, when provided during checkout

Information collected automatically:

• Payment information is collected and processed entirely by Stripe, our payment processor. We never see or store your card details.
• A purchase reference (your Stripe checkout session ID) is stored in your browser's local storage so you can access reports you have paid for.
• Standard technical information (IP address, browser type) may be processed by our hosting and security providers for the purpose of operating the service.

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by UK GDPR:

• Contract — processing necessary to deliver the service you have purchased (generating your report, verifying your access)
• Legitimate interest — operating, securing, and improving the service, including rate-limiting and abuse prevention
• Legal obligation — retaining payment records as required by law

How We Use Your Information

• To generate your report. The business information you provide is sent to Anthropic's Claude AI service to produce your analysis. It may also be used to look up publicly available information about the business via Companies House (official UK government records) and Google's business listings service.
• To process payments via Stripe.
• To verify your access to reports you have purchased.

We do not sell your information. We do not use your information for advertising. We do not use the content of your reports or form submissions for any purpose other than generating your report.

Third-Party Services We Use

• Stripe — payment processing (stripe.com/privacy)
• Anthropic — AI report generation (anthropic.com/privacy)
• Companies House API — official UK public company records
• Google Places API — public business listing information
• Render — website hosting
• Cloudflare — website security and performance

Each of these providers processes data in accordance with their own privacy policies.

Data Retention

We do not store generated reports on our servers. Your report is displayed in your browser at the time of generation, and it is your responsibility to save or print it. Form submissions are processed to generate your report and are not retained as a database of your business information. Payment records are retained by Stripe in accordance with their policies and legal requirements.

Your Rights

Under UK data protection law (UK GDPR), you have the right to access, correct, or request deletion of personal data we hold about you, and to complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled. To exercise any of these rights, contact us at the email address above.

Cookies and Local Storage

We use browser local storage to remember your purchase so you can access reports you have paid for. We do not use advertising cookies, tracking cookies, or analytics services. Our third-party providers (such as Stripe and Cloudflare) may set cookies necessary for security and payment processing.

Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page.