Privacy Policy
Last updated: 2 June 2026
1. Who we are
Clawback ("we", "us") is a Royal Mail invoice auditing and refund-recovery service operated by Saul Davis, United Kingdom. We are the data controller for the personal data described in this policy. You can contact us at saul@clawback.uk.
2. This website
This site is deliberately minimal. It has no contact forms and no advertising, and the fonts are self-hosted, so your browser makes no third-party font requests.
We use Cloudflare Web Analytics, a privacy-first, cookieless analytics tool, to see how many people visit the site and which pages are popular. It measures aggregate traffic only — it does not use cookies, does not fingerprint your device, does not track you across other websites, and does not build a profile of you. We cannot identify you from it.
3. Cookies
This site does not set any advertising or tracking cookies. Cloudflare, which hosts and protects the site, may set a strictly necessary cookie (for example, to verify your browser if a security check is triggered). These are essential to deliver the site securely and are not used to track you, so no cookie banner is required.
4. The data we process when you contact us
When you email us or send us an invoice to audit, we process the information you choose to share, which typically includes:
- Your name, email address, and the business you represent;
- Your Royal Mail Online Business Account (OBA) invoices, statements and related shipping/billing data;
- Any other information you include in your correspondence with us.
5. Why we use it, and our lawful basis
- To respond to your enquiry and to provide the audit and refund-recovery service — lawful basis: taking steps at your request before entering a contract, and performance of our contract with you.
- To prepare, submit and pursue refund claims with Royal Mail on your behalf — lawful basis: contract and our legitimate interests in delivering the service.
- To meet our legal, accounting and tax obligations — lawful basis: legal obligation.
6. Who we share it with
We do not sell your data or use it for marketing lists. We share it only:
- with Royal Mail, to the extent needed to submit and pursue your claims;
- with essential service providers we rely on to operate (for example our email provider);
- where we are required to by law.
7. How long we keep it
We keep your data only as long as needed to provide the service and to meet legal, accounting and tax requirements, after which it is deleted or anonymised. You can ask us to delete your data at any time (subject to those legal requirements).
8. Where it is stored
Your data is held in our email and business systems, which may be operated by providers based in the UK, EEA or elsewhere under appropriate safeguards. We use your invoice data only to deliver this service.
9. Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal data, and to data portability. To exercise any of these, email saul@clawback.uk and we will respond within one month.
10. Complaints
If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
11. Security
We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, but we work to keep your information safe.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date above shows when it last changed.
This privacy policy is provided in good faith and is intended to be reviewed by a solicitor before Clawback handles client data at scale. Clawback is independent and not affiliated with Royal Mail Group Ltd.