1. Who We Are

Band Buster is a service that helps users prepare evidence for a Council Tax band review.

We determine how and why your personal data is processed.

2. What Personal Data We Collect

We collect the following categories of data:

a) Information you provide directly

• Name
• Contact details (email, telephone number)
• Property address
• Information about your property (modifications, photos, EPC certificate)
• Uploaded documents and images
• Any notes or comments added to your evidence pack

b) Information generated by the system

• Comparable property data
• EPC data for your address
• Evidence pack outputs and summaries
• Upload logs and file metadata

c) Technical information

Collected automatically when you use the website:

• IP address
• Device and browser type
• Pages viewed and actions taken
• Cookie identifiers (see Cookie Policy)

This information helps maintain security and improve service performance.

3. How We Use Your Personal Data

We use your data to:

• provide and operate the Band Buster service;
• generate your evidence pack;
• improve the accuracy of property information;
• support any enquiries you make;
• maintain website security;
• comply with legal and regulatory obligations.

We do not submit band review requests on your behalf.

4. Legal Basis for Processing

We process data under one or more of the following UK GDPR lawful bases:

a) Contract

Processing required to provide the service you have requested.

b) Legitimate Interests

To maintain and improve the service, ensure security, and handle enquiries.

c) Consent

Where applicable (e.g. optional cookies, marketing communications).

d) Legal Obligation

If we are required to retain or disclose information to comply with law.

5. Sharing Your Personal Data

We do not sell your data.

We may share limited information with:

a) Service Providers

Trusted third parties such as:

• hosting providers
• cloud storage services
• analytics tools (if used)
• payment processors

These providers only process data on our instructions.

b) Legal or regulatory authorities

Where required to comply with law or lawful request.

c) You

We provide your evidence pack and relevant materials directly to you.

We do not send your information to the VOA.

6. Data Retention

We retain personal data only as long as necessary to:

• provide the Band Buster service,
• maintain records of evidence packs,
• comply with legal duties.

Typical retention periods:

You may request deletion at any time (see Section 9).

7. Data Security

We use appropriate technical and organisational measures to protect your data, including:

• encrypted data storage,
• secure servers,
• restricted data access,
• regular monitoring and testing.

No system is entirely foolproof, but we take reasonable steps to safeguard your information.

8. Cookies

Band Buster uses essential cookies to allow the website to function.

Non-essential cookies (e.g., analytics) are only used with your consent.

For full details, see our Cookie Policy.

9. Your Rights Under UK GDPR

You have the following rights:

• Right of access – request a copy of your personal data.
• Right to rectification – correct inaccurate data.
• Right to erasure – ask us to delete your data where appropriate.
• Right to restrict processing – limit how we use your data.
• Right to data portability – request your data in a structured format.
• Right to object – stop certain types of processing.
• Right to withdraw consent – where processing is based on consent.

To exercise any rights, contact us at:
info@bandbuster.co.uk

We may request proof of identity to ensure security.

10. International Transfers

We aim to store all data within the UK or EEA where possible. In the unlikely event data is transferred outside these regions, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

11. Third-Party Links

The website may link to external sites (e.g., GOV.UK, EPC Register). We are not responsible for the privacy practices of these sites.

12. Children’s Privacy

Band Buster is not intended for use by anyone under 18. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy occasionally. Any changes will be posted on this page with a revised “Last updated” date.

14. Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact:
info@bandbuster.co.uk

If you remain dissatisfied, you have the right to contact the UK Information Commissioner’s Office (ICO):https://ico.org.uk/