Privacy Policy
Last updated: 26 March 2026
1. Who we are
TribDB is operated from Pembrokeshire, Wales, United Kingdom. For data protection enquiries, contact adrian@tribdb.uk.
2. What we collect
When you create an account, we collect:
- Email address (for authentication and billing)
- Payment information (processed by Stripe; we do not store card details)
- Usage data (searches performed, pages viewed) for service improvement
We use cookies only for authentication session management. We do not use advertising trackers or share data with third parties for marketing purposes.
3. Tribunal data
The tribunal decisions and hearing outcomes displayed on TribDB are sourced from official public records. This data is already in the public domain and is published by government bodies and statutory regulators. We aggregate, index, and structure this data to make it searchable. If you are named in a decision and wish to discuss this, contact us.
4. Legal basis
We process your account data on the basis of contractual necessity (to provide the subscription service) and legitimate interest (to improve the Service). Tribunal data processing is based on legitimate interest in providing access to public legal records for research and professional purposes.
5. Data storage
Account data is stored in the EU (Supabase, AWS eu-west-1). Payment data is processed by Stripe in accordance with PCI DSS requirements. We retain account data for the duration of your subscription and for up to 6 years after cancellation for legal and accounting purposes.
6. Your rights
Under UK GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. To exercise these rights, contact adrian@tribdb.uk. We will respond within 30 days.
7. Third parties
- Supabase (authentication and database hosting, EU)
- Stripe (payment processing)
- Vercel (website hosting)
We do not sell, rent, or share your personal data with any other third parties.
8. Changes
We may update this policy from time to time. Material changes will be communicated via the email address associated with your account.