This policy describes how FastValidate collects, uses and protects personal data submitted through the use of our website, software and services. Please read it carefully — by using FastValidate you agree to the practices described here.

This policy also constitutes a Data Processing Agreement between you (as Controller of Personal Data) and FastValidate (as Processor of Personal Data) within the meaning of Article 28 of the UK GDPR and EU GDPR.

1. Introduction

FastValidate is committed to protecting your privacy and the privacy of the end-users (data subjects) whose data you submit for validation. We only process personal data where there is a clear legal basis to do so, and we take appropriate technical and organisational measures to keep it secure.

2. Who We Are

FastValidate is a service solely created, represented and run by Thomas Aaron Linstead. References to "we", "us" or "our" throughout this policy refer to FastValidate. References to "you" or "Client" refer to businesses and individuals who register and use our services.

For data protection enquiries, contact us at: fastvalidate@sitehome.app

3. Data We Collect About You (Account Data)

When you register and use FastValidate, we collect and process the following data about you as our client:

• Account information: email address and hashed password (never stored in plain text).
• Billing information: name, billing address and payment method details. Card details are processed and stored securely by Stripe; we do not store raw card numbers.
• Usage data: the number of validation requests made in each billing period, associated timestamps and the source tag you provide (e.g. the form ID). This is used for billing, rate limiting and service improvement.
• IP address and session data: collected for security purposes (e.g. detecting unauthorised access) and stored for a limited period.
• API keys: the private and public API keys associated with your account, stored securely and used to authenticate API requests.
• Communications: if you contact our support team, we retain records of those communications.

4. Validation Data (Your Customers' Personal Data)

When you use FastValidate to validate email addresses, phone numbers, postal addresses or EU VAT numbers, you submit personal data belonging to your own customers (data subjects). This is the core function of the service.

Each validation request is logged against your account for billing and auditing purposes. What is stored depends on the validation type:

• Email & phone: only the validation type (e.g. "Email") and result (valid/invalid) are logged. The email address or phone number itself is not stored.
• Address: the address string submitted and the formatted result returned by the geocoding provider are stored in the request log. This is necessary to display results in your dashboard and for audit purposes.
• VAT number: only the validation type and result are logged. The VAT number itself is not stored.

All request logs also record your API key reference, the source tag (e.g. your form ID), the requesting IP address, and a timestamp.

You, as the Client, are the Data Controller for this personal data. FastValidate acts as the Data Processor on your behalf, in accordance with Article 4(7) and 4(8) of the UK/EU GDPR. You are fully responsible for ensuring you have a lawful basis to submit your customers' data for validation, and that you have obtained any necessary consents.

5. Legal Basis for Processing

We process your personal data (account data) on the following legal bases:

• Contract performance — processing your email, billing details and usage data is necessary to provide the service you have signed up for.
• Legitimate interests — we process IP addresses and usage logs to ensure service security, prevent abuse and improve our platform. We have balanced these interests against your right to privacy.
• Legal obligation — we may need to retain certain data (e.g. invoices) to comply with financial regulations.
• Consent — if you have opted in to receive marketing communications, we process your email for that purpose. You may withdraw consent at any time by clicking the unsubscribe link in any marketing email.

6. Third-Party Processors

FastValidate uses third-party service providers to operate the platform. By using our service you expressly authorise us to share data with these providers to the extent required:

FastValidate makes its best efforts to limit the personal data transferred to third parties to the minimum necessary for each service.

Our website may contain links to third-party websites. This policy does not apply to those sites and we accept no responsibility for their privacy practices.

Optional Integrations

In addition to the core service, FastValidate offers optional integrations. If you choose to use them, validation requests are routed through those platforms to the same FastValidate API endpoint and processed identically to direct API calls — no additional personal data is collected or retained by FastValidate beyond what is described above. However, each integration platform has its own privacy practices that apply to any data passing through their systems:

• Chrome Extension — the FastValidate Chrome Extension sends validation requests directly from your browser to the FastValidate API. No data is stored by the extension itself. Google's Privacy Policy and Chrome Web Store Terms apply to your use of the Chrome platform.
• Zapier — if you connect FastValidate via Zapier, data you choose to validate (e.g. email addresses or phone numbers from your Zaps) passes through Zapier's infrastructure before reaching the FastValidate API. Zapier's Privacy Policy governs the handling of that data within their platform.
• Salesforce — the FastValidate Salesforce integration sends validation requests from your Salesforce org to the FastValidate API using your API key. Data processed this way is subject to both this policy and Salesforce's Privacy Statement.

7. Retention Periods

We retain personal data only as long as it is needed for the purposes described in this policy:

• Account data (email, API keys, settings): retained for the duration of your account. If you delete your account, all account data is permanently deleted immediately.
• Billing records: retained for 7 years to comply with UK financial regulations, even after account deletion.
• Validation request logs: retained for the lifetime of your account and permanently deleted when your account is deleted. Logs include the validation type, result, source tag, IP address, timestamp, and — for address validations — the address string submitted.
• Session data: expires when you log out or close your browser.

You can delete your account at any time from the My Account page, provided you do not have an active paid subscription. Deleting your account permanently and immediately removes all your account data, API keys, whitelist entries and request logs from our systems. If you have an active subscription you must first cancel it (downgrade to Free), then delete your account.

To request deletion of specific data without closing your account, contact us at fastvalidate@sitehome.app. We will action valid requests within 30 days, except where retention is required by law.

8. Security

FastValidate stores all data on secured servers and takes appropriate legal, organisational and technical measures to protect personal data consistent with applicable privacy and data security laws, including:

• Passwords are hashed using a strong one-way algorithm and never stored in plain text.
• All data in transit is encrypted using TLS/HTTPS.
• Access to production systems is restricted to authorised personnel only.
• We periodically review our security measures and those of our third-party processors.

No method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you without unreasonable delay if we become aware of a security breach that is likely to affect your data.

9. Cookies

FastValidate uses the following cookies:

• Session cookie — a strictly necessary cookie used to keep you logged in during a browser session. This cookie expires when you close your browser or log out.
• reCAPTCHA cookie — set by Google on the sign-up page to distinguish humans from bots. See Google's Privacy Policy.

We do not use advertising, tracking or analytics cookies. You can control cookies through your browser settings, but disabling the session cookie will prevent you from logging in.

10. Your Rights Under UK/EU GDPR

You have the following rights in relation to your personal data. To exercise any of these rights, contact us at fastvalidate@sitehome.app:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate data.
• Right to erasure ("right to be forgotten") — you may request deletion of your personal data, subject to our legal retention obligations. You can also self-serve by deleting your account directly from the My Account page (requires no active paid subscription).
• Right to restriction of processing — you may ask us to restrict how we use your data in certain circumstances.
• Right to data portability — you may request your data in a commonly used machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

FastValidate will assist you in facilitating any data subject rights requests from your own customers that relate to data processed through our service.

11. Children

FastValidate is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete it.

12. Changes to This Policy

FastValidate may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We may also notify you by email for material changes. Continued use of the service after changes are published constitutes acceptance of the updated policy.

If you do not agree with any part of this policy, you should cease using the website, software and services.

Contact

For any questions, requests or complaints regarding this Privacy Policy or the processing of personal data, please contact:

fastvalidate@sitehome.app

---

Also see our Terms & Conditions.