Privacy Policy

Who we are

Section 20 Defender (“we”, “us”) operates this service.

What we collect

To build your Defence Pack, we ask you for:

• Details of the Section 20 notice, demand, or dispute you’re responding to
• Any documents or images you choose to upload, including your notice, invoices, lease extracts and supporting evidence - which may occasionally include sensitive information, for example if correspondence mentions a health or personal circumstance
• Your full name and property address
• Your email address (to send you a copy of your finished Defence Pack)
• Any free-text context you choose to add
• Payment details, handled entirely by Stripe - we never see or store your card details

Special category data

Evidence you choose to provide could occasionally include special category data under UK GDPR - for example, if a piece of correspondence you upload mentions a health condition or personal circumstance. We only process it because you’ve chosen to submit it as part of building your own Defence Pack, for the specific purpose of helping you organise that pack - we don’t use it for any other purpose.

How we use it, and who we share it with

Your case details and documents are sent to Anthropic (the provider of the Claude AI models we use) to extract information, check your case against our issue areas, and draft your Defence Pack, in line with Anthropic’s own privacy and data-use terms.

Payment is processed by Stripe; we only receive confirmation that payment succeeded, not your card details. Your finished Defence Pack is sent to you by email via Resend, our email delivery provider. Case records are stored using Supabase, our database and file storage provider.

We do not sell your personal data, and we do not use it for advertising.

How long we keep it

Uploaded documents and evidence are deleted from our storage once the relevant AI call that reads them has finished, whether it succeeds or fails - nothing about an uploaded file is meant to outlive that one request. Case records used to verify payment are kept only briefly: they’re automatically deleted shortly after your Defence Pack has been generated, or after 24 hours if a checkout was never completed.

Your rights

Under UK data protection law, you have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. Contact us at the address on our Contact page to exercise these rights. You also have the right to complain to the ICO if you believe your data has been mishandled.

Contact

Questions about this policy can be sent via our Contact page.