Privacy notice

Controller

Wolf AI Labs Limited, company number 16609169, ICO registration ZC177753.

What we hold

Your name, date of birth, address, email, your answers, the documents and credit report you upload, the accounts read from it, your letters, the replies you file, your permission choices and a log of account activity.

Why

To run your passport and its tools at your request (contract); to keep the service secure, detect and prevent misuse and protect our content, including by recording account activity and placing hidden identifiers unique to your account in content we supply to you (legitimate interests); and, only if you switch it on, to use anonymised outcome data to improve the platform (consent).

Keeping the platform for your own claims

To stop third party and commercial use, we check that your credit report shows your name and date of birth, keep a fingerprint of each file you upload so the same file in another passport can be spotted, and look at sign up patterns such as several passports from one network address. These checks are for preventing misuse and fraud (legitimate interests). Flags are reviewed by a person before any passport is suspended.

Unlocking your passport

Your passport's claim engine unlocks when you add your own statutory credit report. We read the name and date of birth on it and match them to your passport, and keep a record of when and how your passport was unlocked. If you ask for a manual check, a member of our team looks at that report, your note and your passport details, and records the decision and any reason given. We do this to keep the platform for consumers checking their own claims (legitimate interests), and the check is part of running your passport (contract).

Certificates and your claim passport

Each certificate is digitally signed. The signature covers the certificate reference, issue, verdict, score, record fingerprint and issue time, and never your name or contact details. Anyone you give your reference and surname to can check the certificate; every check is logged. When you download your claim passport, we record that you did and how many files it held. The file itself is yours to share as you choose.

The S1 car finance route

If you add your car finance claim to S1, we record that choice and when you made it, and email you when the route opens. It is a permission you can switch off at any time under Permissions. We do not send your claim anywhere until you choose to.

Who processes it

Hosting and database (Railway), web delivery (Netlify), email delivery (our email provider) and AI processing (Anthropic), each under a data processing agreement. Your documents are encrypted when stored.

Sharing

We never send anything to a provider for you. We share data with a partner only when you switch on that permission and choose to be introduced.

Asking a firm for help

If you raise your hand for legal help, we record your reasons, the firm you chose, the documents you picked and the exact consent you gave. When you click send, your passport sends your claim summary, the breaches found, your letters, the replies, the documents you ticked and your contact details to that firm's secure inbox, at your instruction (contract). Support needs go only if you tick that separately (explicit consent). The firm reads your claim from your passport each time it opens it, and every view and download is logged. If you withdraw consent, the firm declines, or the firm no longer holds a seat in your area, its access ends at once. Anything the firm has downloaded is then held by the firm as its own controller. If no firm is seated in your area we record your request for that area only, and send nothing to anyone.

Moving to a new provider

Each claim shows providers you can move to. If you follow a link we record the date, the claim, the provider and the kind of link, so the platform can count use and keep its records. If you record a move, we keep the new provider, the date and any renewal date you give. We never send your details to any provider; you enter them yourself on their site. Links marked Affiliate link may let the affiliate network set its own tracking cookies, which it does only if you turn on Affiliate tracking cookies in Permissions (consent). You can turn this off at any time.

Taking your complaint to the ombudsman

If you prepare a referral to an ombudsman, we keep what you write, the date you record it as sent, the ombudsman reference you add and a PDF copy of your referral, so you can track your complaint. You send the referral yourself; we do not send your data to the ombudsman.

Claim certificates

To certify your claims we test the record you already hold in your passport and keep, for each certificate, its reference, verdict, gate results, evidence completeness score, identified value and a fingerprint of the record (contract). When someone checks a certificate reference at claimpassports.com/certificate with your surname, we log the reference, the result and the network address (legitimate interests, to prevent misuse). The check shows only the verdict, the gates, the score and the date; your claim details, contact details and value are never shown.

Keeping data

For as long as your account is open, then deleted when you close it, apart from the minimum needed for legal obligations. We keep a count of when passports are opened, verified and closed, by postcode area only, to run the platform (legitimate interests). It holds no name, email, address or full postcode, and it stays after an account is closed.

Your rights

You can download your data, correct it, withdraw any optional permission or close your account in the app. You can complain to the Information Commissioner's Office at ico.org.uk.