Legal

Privacy Policy

Last updated: 2 June 2026

In short: this website sets no tracking cookies and cannot identify you. We use a privacy-first, cookieless analytics tool to count visits in aggregate, and we only process your personal data when you contact us or ask us to audit your Royal Mail invoices — used solely to provide that service.

1. Who we are

Clawback ("we", "us") is a Royal Mail invoice auditing and refund-recovery service operated by Saul Davis, United Kingdom. We are the data controller for the personal data described in this policy. You can contact us at saul@clawback.uk.

2. This website

This site is deliberately minimal. It has no contact forms and no advertising, and the fonts are self-hosted, so your browser makes no third-party font requests.

We use Cloudflare Web Analytics, a privacy-first, cookieless analytics tool, to see how many people visit the site and which pages are popular. It measures aggregate traffic only — it does not use cookies, does not fingerprint your device, does not track you across other websites, and does not build a profile of you. We cannot identify you from it.

3. Cookies

This site does not set any advertising or tracking cookies. Cloudflare, which hosts and protects the site, may set a strictly necessary cookie (for example, to verify your browser if a security check is triggered). These are essential to deliver the site securely and are not used to track you, so no cookie banner is required.

4. The data we process when you contact us

When you email us or send us an invoice to audit, we process the information you choose to share, which typically includes:

5. Why we use it, and our lawful basis

6. Who we share it with

We do not sell your data or use it for marketing lists. We share it only:

7. How long we keep it

We keep your data only as long as needed to provide the service and to meet legal, accounting and tax requirements, after which it is deleted or anonymised. You can ask us to delete your data at any time (subject to those legal requirements).

8. Where it is stored

Your data is held in our email and business systems, which may be operated by providers based in the UK, EEA or elsewhere under appropriate safeguards. We use your invoice data only to deliver this service.

9. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, and to data portability. To exercise any of these, email saul@clawback.uk and we will respond within one month.

10. Complaints

If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

11. Security

We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, but we work to keep your information safe.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it last changed.

This privacy policy is provided in good faith and is intended to be reviewed by a solicitor before Clawback handles client data at scale. Clawback is independent and not affiliated with Royal Mail Group Ltd.