Privacy Policy
1. Who we are
Unlist ("we", "us") is a trading name operated by a sole trader and provides the junk mail opt-out service at unlist.uk. We are the data controller for personal data collected through this service.
Contact: hello@unlist.uk
2. What data we collect
- Name and postal address — required to file opt-outs on your behalf
- Email address — to send confirmation, MPS link, and renewal communications
- Timestamp of Letter of Authority agreement and opt-out filing
Unlist is free to use. If you choose to donate via our support page, payment data for that donation is processed and held by Stripe — we do not store card details.
3. How we use your data
We use your data only to:
- File opt-out registrations with the DMA, Royal Mail, and data brokers on your behalf
- Send you confirmation, MPS registration link, and renewal emails
- Maintain records of opt-out submissions for renewal purposes
We do not sell, share, or use your data for any marketing purpose.
4. Legal basis for processing
We process your data under consent (you tick the Letter of Authority) and legitimate interest (maintaining records of opt-out actions taken on your behalf).
5. Data sharing
We share your data only with:
- The DMA — to register your Your Choice opt-out
- Royal Mail — to trigger your Door-to-Door opt-out form
- Experian, Equifax, Whistl — GDPR objection notices only
- Supabase — secure encrypted database hosting
- Brevo — transactional email sending
- Stripe — only if you make a donation
The MPS registration is completed by you directly — we do not transmit your data to MPS.
6. Data retention
We retain your data while your account is active, to maintain renewal records for the DMA and Royal Mail opt-outs (which expire every ~2 years). You may request deletion at any time — note that deletion will end your opt-out coverage and stop renewal reminders.
7. Your rights
Under UK GDPR you have the right to: access your data · correct inaccuracies · request deletion · restrict or object to processing · data portability. Email hello@unlist.uk to exercise any of these rights. You may also complain to the ICO at ico.org.uk.
8. Security
Data is stored in an encrypted, access-controlled database (Supabase, EU region). Any donation payment is handled entirely by Stripe, a PCI-DSS Level 1 certified processor. We do not store card numbers or full payment details.
9. Advertising
Unlist may display a small advertisement via EthicalAds, which does not use cookies, does not track users across sites, and selects ads based only on page content — not personal data. No cookie consent banner is required for this.
10. Cookies
We use no tracking cookies. If you donate, Stripe's checkout uses cookies strictly necessary for payment processing.