Privacy Policy

1. Who we are

This policy explains how Corpium ("we", "us", "our") collects, uses and protects information when you use this website. Corpium is a UK company search service that republishes public company information from Companies House, and offers an optional paid credit report. If you have any questions, contact us at privacy@corpium.co.uk.

2. Two kinds of data on this site

It's important to separate two very different categories of data that appear on Corpium:

• Public company register data — company names, officers, persons with significant control (PSC), registered addresses, and filing history. This is not data you give us; it comes entirely from Companies House's public register, described in detail in section 3 below.
• Your own data as a visitor — technical data generated by your use of the site (see section 4), and, if you purchase a credit report, your order and payment details (see section 5).

3. Company register data, and GDPR

All company, officer, PSC and filing information shown on Corpium is sourced from Companies House, the UK's official registrar of companies. Under the Companies Act 2006, Companies House is legally required to maintain a register of this information and make it available for public inspection — this is publicly available information, already published by a government body, not private data we have obtained or inferred ourselves.

Because this data is already lawfully public, our processing of it (storing a copy, indexing it for search, and displaying it) relies on the following lawful bases under UK GDPR:

• Article 6(1)(e) — public task: the data originates from, and reflects, a public task that Companies House itself is required by statute to perform (maintaining a public register).
• Article 6(1)(f) — legitimate interests: making that same public register easier to search and understand serves a legitimate interest — of ours, and of the people who use Corpium for due diligence, compliance, journalism or general research — without overriding the rights of the individuals listed, since no additional personal data is disclosed beyond what Companies House already publishes.

We only display what Companies House itself discloses publicly: officer/PSC names, nationality, appointment and resignation dates, month and year of birth (never a full date of birth — that field is always redacted, exactly as it is on the official register), and a service address rather than a residential address. We do not combine this with any other data source to build a fuller profile of an individual, and any AI-generated summaries on the site are derived only from these same public facts.

If a detail is wrong or you believe your information shouldn't be public, the most effective route is Companies House directly, since we mirror their register rather than being its source — see our Help Centre for how that process works. You can also contact us directly (details in section 8) and we will remove or refresh our own cached copy of your data on request.

4. Data we collect about visitors

Like most websites, our hosting and analytics infrastructure automatically logs standard technical data when you visit — IP address, browser and device type, pages viewed, and timestamps. We use this only to operate, secure and improve the site (for example, detecting abuse or measuring which features are used), under our legitimate interest in running a reliable service. We do not use this data to build advertising profiles, and we do not sell it.

5. Credit report purchases

If you buy a credit report, we (or our payment processor, acting on our behalf) process the information needed to complete that purchase — such as your email address and payment details — under the contract we enter into with you at checkout. We do not store your full card details ourselves; card payments are handled by a PCI-compliant payment provider.

6. Cookies

We use a small number of cookies necessary for the site to function. For full details, see our Cookie Policy.

7. Data retention

We keep a cached copy of Companies House register data for as long as it remains on the official public register (refreshed periodically so it stays current), plus a short period afterwards for companies that are dissolved. Visitor logs and order records are kept only as long as needed for the purposes described above, or as required by law (for example, tax and accounting records for purchases).

8. Your rights

Under UK GDPR, you have the right to request access to, correction of, deletion of, or a copy of your personal data, and to object to or restrict certain processing. To exercise any of these rights over data we hold about you as a visitor or customer, email privacy@corpium.co.uk. For personal data appearing on the public company register itself (officer/PSC records), see section 3 above — corrections to the register are handled by Companies House. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at any time.

9. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above whenever we do; significant changes will be highlighted on this page.

10. Contact us

Questions about this policy or how we handle data? Email privacy@corpium.co.uk.