Last updated: 2 June 2026
DPA Check (“we”, “us”) is a free tool that gives an indicative answer to whether a property is in a Designated Protected Area. It is operated by Tally Digital. This policy explains what personal data we handle and why. We have deliberately built the service to collect as little as possible.
When you search an address, postcode, coordinates or drop a map pin, that location text/coordinate is sent to the third-party lookup services listed below so we can resolve it to a civil parish. We do not store the address or postcode you searched.
For each check we record a privacy-light usage event containing: the time, the input method (postcode / address / coordinates / map pin), the verdict produced (e.g. “in a DPA”), a daily-rotating, salted one-way hash of your IP address, and two coarse, non-identifying signals — your country (the two-letter code our network provider derives from your IP, e.g. “GB”) and a broad device type (desktop / mobile / tablet, derived from your browser’s user-agent). The hash lets us count approximate unique visitors per day; it cannot be reversed to your IP, and we do not store your raw IP address or full user-agent from normal use of the checker.
We also keep the same kind of privacy-light record for page views (which page, the time, the salted visitor hash, your country and device type as above, and — for visits from another website — the referring site’s domain) and for a few interactions (e.g. opening an official map or the legislation, dropping a map pin). These are anonymous, aggregate counts that show us how the tool is used; they contain no personal data and set no cookies.
If you use the feedback form, we collect what you enter — your message, and optionally your name, email address and the “capacity” you’re using the tool in — together with your IP address and the time. We use this to read and respond to your feedback and to improve the service. Providing a name and email is optional; without an email we cannot reply. The form is protected from spam by Cloudflare Turnstile.
If you tick the optional box to receive updates, we keep your email address so we can occasionally email you about DPA Check. This is based on your consent: we only do so if you ticked the box and provided an email, and you can opt out at any time by replying to any such email or contacting us.
We use Google Analytics 4 to understand how the site is used. It is off by default and only runs if you click Accept on the cookie banner — analytics cookies are set only after you consent, and you can decline. Aside from that, Cloudflare Turnstile (the anti-spam check on the feedback form) may set a strictly-necessary token to function, and your browser stores a small preference locally (the “precise address lookup” toggle and your cookie choice). We set no advertising cookies and do no cross-site advertising tracking.
We use the following providers (“processors”) to run the service:
| Provider | Purpose |
|---|---|
| Hetzner (Germany) | Hosting the website |
| Cloudflare | DNS, anti-spam (Turnstile) and email routing |
| Brevo (Sendinblue, EU) | Sending feedback notification emails |
| postcodes.io · OpenStreetMap (Photon/Nominatim) · ONS | Resolving a location to a parish/boundary |
| Ideal Postcodes | Precise address lookup — only if you switch it on |
| Google Search Console | Aggregate search-performance statistics for the site (no individual user data) |
| Google Analytics 4 | Website usage analytics — loaded only if you accept cookies |
When you search, your query is sent to the relevant lookup provider(s) above and is subject to their own privacy terms.
Feedback messages are kept while they remain useful for support and improving the service, and then deleted. Usage events are aggregate, low-detail and retained to understand how the tool is used.
We rely on our legitimate interests in operating, securing and improving a free public tool, and on your consent where you submit feedback or accept analytics cookies. We do not sell personal data.
You have the right to access, correct or delete personal data we hold about you, to object to or restrict processing, and to complain to the Information Commissioner’s Office (ICO). To exercise any of these, contact us at [email protected].
The service is intended for adults dealing with property matters and is not directed at children.
We may update this policy; the “last updated” date above will change accordingly.
Tally Digital — [email protected]. See also our Terms of Use.
This policy is provided for transparency and is not legal advice. It should be reviewed against your final data-processing arrangements before relying on it.