Privacy notice

Last updated 13 May 2026.

This notice explains how Company Register UK handles personal data appearing on this site, what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and how to contact us.

1. Who we are

Company Register UK is operated by Digital Signet, a sole-trader business based in the United Kingdom. For the purposes of UK GDPR we are the data controller for personal data processed on this site.

Contact: [email protected]

We are not Companies House. The official UK companies register is operated by Companies House, an executive agency of the Department for Business and Trade, at find-and-update.company-information.service.gov.uk.

2. What personal data we process

This site displays information that Companies House publishes about UK-registered companies. Some of that information is personal data, including:

  • Names of company directors, secretaries, and other officers
  • Their role, appointment date, and resignation date (where applicable)
  • Their nationality and country of residence
  • Their month and year of birth (Companies House publishes only the month and year, not the day)
  • Their occupation as filed
  • Service addresses they have filed with Companies House (not residential addresses — Companies House does not publish those)
  • Names of persons with significant control (PSCs) and the nature of their control

We do not process any data from site visitors beyond what is needed to serve the site (basic server logs may include IP address and user-agent for security, retained for up to 30 days). We do not use third-party analytics or advertising cookies at this time.

3. Where the data comes from

All company and officer information shown on this site is sourced directly from:

  • The Companies House free bulk data download (monthly snapshot of the live register)
  • The Companies House Public Data API (for officers, filings, charges, and persons with significant control, fetched on demand)

This data is made available by Companies House under the Open Government Licence v3.0, which permits free use including for commercial purposes.

4. Our lawful basis for processing

We rely on two lawful bases under Article 6 of UK GDPR:

  • Legitimate interests (Art. 6(1)(f)). Our interest is in making the statutorily-public UK companies register more accessible, readable, and searchable. The interest of third parties (members of the public, journalists, accountants, researchers, due-diligence teams) is in having faster, clearer access to public information they are statutorily entitled to inspect.
  • Public task (Art. 6(1)(e)) where relevant. Under section 1085 of the Companies Act 2006, the UK companies register is required by law to be open to public inspection. We are providing a reading layer over that legally-public information.

We have considered the rights and freedoms of data subjects in deciding whether to process this data. Because the data is already public under statute, and we display no more than Companies House itself displays, we consider this processing proportionate.

5. How long we keep the data

We refresh our local copy of the register approximately once per month from the Companies House bulk download. We retain the data for as long as Companies House publishes it. When a company is removed from the live register, our next monthly import will reflect that. We do not retain historical snapshots of dissolved companies beyond what the live register contains.

Server access logs are kept for up to 30 days and then deleted.

6. Who we share data with

We do not sell or share your personal data with any third party for marketing, advertising, or any other purpose. The data is displayed publicly on this site to anyone with the URL. We do not use third-party processors that would receive personal data on our behalf, beyond the hosting provider (Hetzner Cloud, Finland) and the CDN (Cloudflare).

7. International data transfers

Our servers are located in Helsinki, Finland (Hetzner Cloud). Cloudflare may cache static assets and serve them from edge locations globally. Both Finland and the Cloudflare adequacy framework satisfy UK GDPR data-transfer requirements. We do not transfer personal data outside of the UK or EU/EEA in any meaningful sense beyond standard CDN caching.

8. Your rights

Under UK GDPR you have the following rights regarding your personal data on this site:

  • Right of access (Art. 15). You can ask us what personal data we hold about you. Since the data is sourced from Companies House and visible on the official register, your fastest path is to view the company profile page directly. We can also tell you what we have.
  • Right to rectification (Art. 16). If information about you is incorrect, please rectify the record at Companies House directly: our monthly import will pick up the corrected data automatically. We cannot change the underlying record. If a display issue on this site misrepresents what Companies House published, please tell us and we will correct it.
  • Right to erasure (Art. 17). This right is limited where the data is processed for a public-task purpose or where processing is necessary for compliance with a legal obligation. The UK companies register is a statutorily-public register; we cannot erase data that Companies House continues to publish. We will consider erasure requests on a case-by-case basis.
  • Right to restriction (Art. 18). Where you contest accuracy or object to processing, you can ask us to restrict our processing while we consider your request.
  • Right to object (Art. 21). You can object to our processing of your personal data on grounds relating to your particular situation. We will weigh your objection against the compelling legitimate grounds for our processing.
  • Right to data portability (Art. 20). Where applicable, you can ask for your data in a structured, machine-readable format.
  • Right to complain to the ICO. You can complain to the UK Information Commissioner's Office at any time, at ico.org.uk or by phoning 0303 123 1113.

9. How to make a request

Email [email protected] with:

  • What you would like us to do (access, rectification, erasure, restriction, objection, portability)
  • The URL of the company profile your request relates to, where applicable
  • Enough information for us to verify your identity (we may ask follow-up questions)

We will respond within 30 days of receiving a complete request, as required by UK GDPR. If your request is complex we may extend this by up to two further months and will tell you why.

There is no fee for making a request, unless it is manifestly unfounded or excessive.

10. Cookies and tracking

This site does not currently set any analytics or advertising cookies. Cloudflare may set a small set of operational cookies for security purposes (eg the __cf_bm bot-management cookie). These do not personally identify you.

If we add analytics in future, we will update this notice and add a clear consent mechanism where required.

11. Changes to this notice

We may update this notice from time to time. The “last updated” date at the top of this page will change accordingly. Material changes will be flagged on the home page for at least 14 days.

Related