Privacy notice

Who controls your information

Elixon LTD, trading as CompanyGuard, is the intended controller. Elixon LTD is registered in England and Wales under company number 11639021. Its registered office is 51 Roundmead, Bedford, United Kingdom, MK41 9HY.

Privacy enquiries and data protection requests should be sent to support@companyguard.uk. Messages to this address route to the monitored owner inbox. Inbound delivery and an outbound reply were confirmed by the owner on 29 July 2026.

Information we use and where it comes from

Categories include account and business contact details supplied by users, portfolio labels and notification recipients supplied by an accounting practice, billing and service records, security and audit logs, and company information obtained from the public Companies House register. Public register information can include personal information about company officers. CompanyGuard does not request special-category data.

Why we use information

Account, subscription and requested monitoring data is used where necessary to take steps at your request and deliver the service contract. Security, fraud prevention, service audit and protection of legal claims rely on Elixon LTD's legitimate interests in operating a secure and accountable service. Billing and company records are also kept where required by law. Direct electronic marketing requires the appropriate PECR permission, and any consent used can be withdrawn.

Who receives information and international transfers

Production suppliers are Fly.io for application and database hosting, Stripe for checkout, subscriptions and billing, Resend for service email, GlitchTip for error monitoring and a self-hosted Umami service for anonymous public-page analytics when that release switch is enabled. Companies House is the source of public company information. Access is limited to what each service requires. Stripe and Resend publish data-processing and transfer terms. Elixon LTD records its processor contracts, transfer position and retention controls before paid registration can be enabled.

How long we keep information

CompanyGuard keeps portfolio events for 365 days, monitoring runs and notification history for 180 days, and administrative audit events for 730 days. These database rules are installed for every practice and enforced daily. Technical monitoring records are kept for 90 days and encrypted Fly volume snapshots for seven days. Account data is removed when an authorised owner deletes the practice, except for records that Elixon LTD or a payment provider must retain for tax, accounting, fraud prevention, disputes or legal claims. Accounting and payment documents are kept for six years. A legal hold suspends deletion only for the affected case and data class.

Your data protection rights

Depending on the purpose and lawful basis, you may have rights to access, correct, erase, restrict or transfer your information, and to object to its use. You may withdraw consent at any time where consent is the basis. Send a request to support@companyguard.uk. Elixon LTD may need proportionate information to verify the requester and will explain if a right does not apply.

Cookies and automated decisions

CompanyGuard uses essential signed session, security and optional remember-me cookies to operate accounts. It does not use advertising cookies. When enabled, Umami runs only on public pages, uses no cookies and is not used to identify signed-in users. It records anonymous page and device information such as page path, referrer, browser, device type and country. Do not Track is respected by the configured public tracker. Monitoring highlights and reminders do not make solely automated decisions that produce legal or similarly significant effects.

Complaints

Please contact Elixon LTD first so it can investigate. You also have the right to complain to the Information Commissioner's Office.