Small print
Privacy
Last updated 16 October 2026
The short version: we collect nothing unless you write to us or ask for your own report. We use what you give us for that and nothing else, and we never sell, rent or share it.
Who we are
What The Record Says is run by Yours2u Limited, a company registered in England and Wales (company number 06376426). Registered office: The House Of Wealth, Earlsdon Park, 53-55 Butts Road, Coventry, CV1 3BH, United Kingdom. Yours2u Limited is the data controller for this site, which means we decide what happens to any personal information you give us and we answer for it.
We are registered with the Information Commissioner's Office, the UK data protection regulator. Registration number: ZA159122.
When you are only reading
No cookies. No analytics, no tracking pixels, no fingerprinting, and nothing stored in your browser. There is no advertising on this site and no third party is measuring your visit. We do not know who you are or that you were here.
One thing happens anyway, and you should know about it.
- Our host keeps server logs. The site is served by Netlify, who record the usual things a web server records, including your IP address. That is how every website on the internet works.
Everything else the page needs, including its typefaces, comes from this site. Your browser does not contact Google or any other font or content service when you read it. When you use the form or the check, it also contacts Cloudflare, which runs the check that you are a person (see below).
When you use the form
We ask for a name, an email address, and what you want. If you pick I have something you should see, the name and the email become optional, because we should not be demanding identity from somebody taking a risk.
What happens to it: the submission goes to n8n Cloud, which stores it in our contact records at OnePageCRM and emails it to us. If that route fails, Netlify stores it and emails it to us instead. We read it and we reply. We do this because you asked us to, which the law calls our legitimate interest in answering you.
The form is not a secure channel
It is ordinary email. It is not anonymous, the submission carries your IP address, and it passes through companies we do not control. If you are handing us something you are not supposed to be handing us, this is not the way to do it. Leave the name and the address blank and tell us how to reach you another way.
When you ask for your own report
Every report carries a link where you can pick your own business and ask for a reading of its public record. To send it, we need your email address and the business you picked.
- Your report. We use your email address to send it. That is the reason you gave it to us.
- Anything after that is your choice. We only send follow-up emails about your results, or our newsletter, if you said yes when you asked for the report. Every email has a link to stop them, and stopping takes one click.
- Sponsors. Some emails carry a clearly labelled sponsor. Sponsors pay for the space. They never receive your name, your email address, the business you looked up or anything else about you.
Who we never give it to
Anybody. We do not sell it, rent it or share it. That includes sponsors, and it includes the group or newsletter that gave you the report. Nobody gets your details, in any arrangement we have.
Who handles it for us
A few companies hold or carry your information on our behalf, under contract, and may not use it for anything else.
- Netlify hosts this site and stores form submissions.
- n8n Cloud receives what you send through the form and the check, keeps a log of each one, and passes it on.
- OnePageCRM stores your contact details and what you sent, from the form and the check, so that we can reply.
- Cloudflare Turnstile checks that a person, not a program, is sending the form or the check. Your browser contacts it only when you use one of them.
- Google hosts our email. Messages to us arrive there. Reports are sent through Resend, from a whattherecordsays.com address.
Some of these companies store data in the United States. Where they do, the transfer is covered by the UK safeguards for sending personal data abroad, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement.
How long we keep it
- Messages through the form: 12 months after our last reply, then deleted.
- Report requests: for as long as you are getting emails from us. If you stop them, we delete your details within 30 days, apart from a note of your address that makes sure we never email you again.
Only the people who run What The Record Says at Yours2u Limited can see it.
Your rights
You can ask what we hold about you, ask us to correct it or delete it, object to how we use it, or withdraw a yes you gave us. Write to us through the form on the home page, or by post to the registered office above, and we will answer within a month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk/make-a-complaint.
If you are in the United States: we do not sell or share personal information, as California law defines those words, and we never have.
Changes
If we change this page we will update the date at the top.