Privacy Policy
Last updated: 20 August 2026
1. Who we are
FeasibilityLab is a trading name operated by an individual sole trader based in England. We are the data controller for personal data collected through this website. Correspondence address: 55 Percival Road, Enfield, EN1 1QS, England.
For privacy questions or data-rights requests, use the contact form and begin your message with “Data Rights Request”. ICO registration reference: ZC149718.
2. Information we collect
- +Planning-check information: postcode, identified local authority, whether the postcode is in London, project type, result and timestamp. Other detailed answers are used in your browser to calculate the result and are not included in the usage record sent by the checker.
- +Contact information: name, email address, message and timestamp when you use the contact form.
- +Technical information: IP address, browser, requested pages and security events collected by our hosting and security infrastructure.
- +Historical notification signups: email address, source, borough and signup date previously collected from the discontinued planning-report notification forms. Those forms are no longer active.
3. Why we use information
| Purpose | Information | Lawful basis | Retention approach |
|---|---|---|---|
| Generate and improve the free checker; understand aggregate usage | Planning-check information | Legitimate interests in operating and improving the service | Reviewed at least annually; normally deleted or anonymised within 24 months |
| Respond to an enquiry | Name, email and message | Legitimate interests in responding to requests and keeping necessary correspondence | Normally up to 24 months after the enquiry is resolved, unless a longer period is required for a legal reason |
| Protect, diagnose and operate the website | Technical information | Legitimate interests in security and service reliability | According to the relevant hosting/security service and account settings; retained only as long as needed |
| Manage the purpose originally requested by historical planning-report signups | Historical notification signup | Consent originally provided | Until consent is withdrawn or no later than two years after signup without renewed consent |
Historical planning-report signup data will not be used to market the energy product or unrelated FeasibilityLab products without a new, specific and valid permission.
4. Services that receive information
- Postcodes.io: receives the postcode you submit so the checker can identify the local authority. Review its privacy information before using the postcode lookup if you have concerns about this transfer.
- Google: Google Sheets and Apps Script are used to store planning-check usage records, contact enquiries and historical notification signups.
- Netlify: hosts and delivers the website and provides infrastructure logs and aggregate web analytics.
- Professional or public authorities: information may be disclosed where reasonably necessary to obtain professional advice, protect legal rights, or comply with a legal obligation or lawful request.
Some providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, we expect the relevant provider arrangements or other lawful transfer mechanism to apply.
5. Your rights
Depending on the circumstances, UK data-protection law may give you rights to:
- +ask for access to personal data we hold about you.
- +correct inaccurate or incomplete information.
- +request deletion or restriction of processing.
- +object to processing based on legitimate interests.
- +receive certain information in a portable format.
- +withdraw consent at any time where consent is the lawful basis.
Contact us using the address in Section 1. We may need to verify your identity. You may also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
6. Cookies and local storage
The public checker does not use advertising or behavioural-marketing cookies. Strictly necessary signed session cookies are used for password-protected site access and administration when those features are enabled. They expire after the configured session period. Admin-only notes may be stored locally in the administrator’s browser.
Hosting infrastructure may also use strictly necessary technical storage for security and delivery. If non-essential analytics, advertising or marketing technologies are added later, this notice and the consent approach must be reviewed first.
7. Automated results
The checker automatically applies rule-based planning logic to the information you provide. The result is indicative, does not grant or refuse planning permission, and does not itself produce a legal or similarly significant decision about you. Contact your local planning authority or a qualified professional if you need a formal or professionally reviewed position.
8. Security
We use measures intended to protect information, including HTTPS, access controls, input validation and restricted administration. No internet service can guarantee absolute security. If a personal-data breach requires notification under applicable law, we will notify the ICO and affected people as required.
9. Children
The service is not directed at children. If you believe a child has provided personal data through the website, contact us so we can review and, where appropriate, delete it.
10. Changes to this policy
We will update this page and its date when the service or data use changes. Before launching any paid energy or other FeasibilityLab product, we will update the privacy information for its actual checkout, fulfilment, support, analytics and marketing flows.