Last updated: 2 June 2026
DPA Check (“we”, “us”) is a free tool that gives an indicative answer to whether a property is in a Designated Protected Area. It is operated by Tally Digital. This policy explains what personal data we handle and why. We have deliberately built the service to collect as little as possible.
When you search an address, postcode, coordinates or drop a map pin, that location text/coordinate is sent to the third-party lookup services listed below so we can resolve it to a civil parish. We do not store the address or postcode you searched.
For each check we record a privacy-light usage event containing: the time, the input method (postcode / address / coordinates / map pin), the verdict produced (e.g. “in a DPA”), and a daily-rotating, salted one-way hash of your IP address. The hash lets us count approximate unique visitors per day; it cannot be reversed to your IP, and we do not store your raw IP from normal use of the checker.
If you use the feedback form, we collect what you enter — your message, and optionally your name, email address and the “capacity” you’re using the tool in — together with your IP address and the time. We use this to read and respond to your feedback and to improve the service. Providing a name and email is optional; without an email we cannot reply. The form is protected from spam by Cloudflare Turnstile.
We use Google Analytics 4 to understand how the site is used. It is off by default and only runs if you click Accept on the cookie banner — analytics cookies are set only after you consent, and you can decline. Aside from that, Cloudflare Turnstile (the anti-spam check on the feedback form) may set a strictly-necessary token to function, and your browser stores a small preference locally (the “precise address lookup” toggle and your cookie choice). We set no advertising cookies and do no cross-site advertising tracking.
We use the following providers (“processors”) to run the service:
| Provider | Purpose |
|---|---|
| Hetzner (Germany) | Hosting the website |
| Cloudflare | DNS, anti-spam (Turnstile) and email routing |
| Brevo (Sendinblue, EU) | Sending feedback notification emails |
| postcodes.io · OpenStreetMap (Photon/Nominatim) · ONS | Resolving a location to a parish/boundary |
| Ideal Postcodes | Precise address lookup — only if you switch it on |
| Google Search Console | Aggregate search-performance statistics for the site (no individual user data) |
| Google Analytics 4 | Website usage analytics — loaded only if you accept cookies |
When you search, your query is sent to the relevant lookup provider(s) above and is subject to their own privacy terms.
Feedback messages are kept while they remain useful for support and improving the service, and then deleted. Usage events are aggregate, low-detail and retained to understand how the tool is used.
We rely on our legitimate interests in operating, securing and improving a free public tool, and on your consent where you submit feedback or accept analytics cookies. We do not sell personal data.
You have the right to access, correct or delete personal data we hold about you, to object to or restrict processing, and to complain to the Information Commissioner’s Office (ICO). To exercise any of these, contact us at privacy@dpacheck.co.uk.
The service is intended for adults dealing with property matters and is not directed at children.
We may update this policy; the “last updated” date above will change accordingly.
Tally Digital — privacy@dpacheck.co.uk. See also our Terms of Use.
This policy is provided for transparency and is not legal advice. It should be reviewed against your final data-processing arrangements before relying on it.