Privacy notice

Last updated: 29 October 2026.

Who is responsible for your data

Lloyd Byatt, trading as SpoofGuard, Biggleswade, Bedfordshire, UK, is the controller of personal data described here. Contact: hello@spoofguard.co.uk.

The free domain checker

The checker runs in your browser. When you type a domain, your browser asks Cloudflare's public DNS service (cloudflare-dns.com) for that domain's public records. We do not receive or store the domain you check. Cloudflare's own privacy policy applies to that request. The website itself is hosted on Cloudflare Pages, which may process technical data such as IP addresses to deliver and protect the site. We do not use advertising or tracking cookies.

What we collect and why

• When you contact us: your name, email address, business name, domain and anything you tell us. Lawful basis: our legitimate interest in replying, or steps before entering a contract.
• When you buy: the above plus payment details. Payments are handled by Stripe; we never see your full card number. Lawful basis: performing our contract with you, and our legal obligation to keep financial records.
• While doing the work: DNS records and DMARC reports for your domain. These are mostly technical data about mail servers, but may include some IP addresses and email addresses. Lawful basis: performing our contract with you.
• Business marketing: we may email generic business addresses of limited companies about this service, using publicly available information such as Companies House records, company websites and public DNS. Every message says who we are and how to opt out, and we keep a suppression list so we never contact you again if you ask. Lawful basis: legitimate interests. We do not send unsolicited marketing email to sole traders or non-limited partnerships.

Who we share it with

Only service providers we need to run the business: our email provider, Stripe (payments), Cloudflare (website hosting) and, if used, a DMARC report processing service. We do not sell personal data.

How long we keep it

Enquiries that do not lead to work: 12 months. Customer records and invoices: 6 years after the end of the tax year, as required for tax purposes. Opt-out (suppression) records: kept for as long as we send marketing, so we can honour your request.

International transfers

Some providers may process data outside the UK. Where they do, they rely on lawful transfer mechanisms such as UK adequacy regulations or the International Data Transfer Agreement.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to processing (including any marketing, which we will stop immediately), or restrict how we use it. Email hello@spoofguard.co.uk. If you are unhappy, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.