Privacy notice
This notice explains how Mediahubink Limited uses personal information when you use LevyBot, our Building Safety Levy checking tool, or ask us about a Readiness Report.
Who we are
Mediahubink Limited is the data controller. We are a private limited company registered in England and Wales (company number 17218602), with our registered office at 7 Tileyard North, Wakefield WF1 5FY. We are registered with the Information Commissioner's Office, registration number ZC241532. Contact us about privacy at hello@mediahubink.com.
Using the levy check
The levy check works out your result in your browser. We don't receive or store the answers you enter, and we don't ask for your name or contact details, unless you choose to send us a Readiness Report request.
Like any website, our hosting provider receives technical information when you visit, such as your IP address, browser type and the pages you request.
If you look up a council by postcode, your browser sends that postcode directly to postcodes.io, a free postcode lookup service, to find the local authority. We don't receive it. Please enter a postcode only, not a full address or anyone's name.
Requesting a Readiness Report
If you send us a request, we collect your name and email address, and any company name, phone number and notes you choose to add. We also receive a summary of the scheme you entered, the indicative levy figure and the page you sent it from.
We need your name and email address so we can reply. The other fields are optional.
We use this information to:
- reply to your request and talk through what you need
- arrange a professional review, if you decide you want one (see "Introductions to professional firms" below)
- keep a record of requests and what happened to them
- protect the service against spam and misuse
Please don't include information about residents or tenants, health information, identity documents, bank details or other people's personal information in your notes.
Our lawful bases
| What we do | Lawful basis |
|---|---|
| Replying to a request you send on behalf of a business or other organisation | Our legitimate interests in responding to business enquiries and running our service |
| Replying to a request you send for yourself, where it may lead to a contract with us | Taking steps at your request before entering into a contract |
| Keeping a record of requests, introductions and any fees | Our legitimate interests in managing our business and keeping proper records |
| Protecting LevyBot against spam, misuse and unauthorised access | Our legitimate interests in keeping the service secure and reliable |
| Keeping accounting and tax records | Legal obligation |
| Dealing with complaints and legal claims | Our legitimate interests in protecting our legal rights |
Where we rely on legitimate interests, we have considered whether the use is necessary and whether your rights and interests outweigh ours. You can object at any time (see "Your right to object" below).
The tick box on the request form confirms that you want us to contact you. It is not the lawful basis for everything else in this notice. We don't send marketing to people who use LevyBot.
Introductions to professional firms
When you send a request, it comes to Mediahubink only. We don't pass it on automatically.
If your scheme needs a review by an independent professional firm, such as a chartered quantity surveyor, we will tell you which firm we propose and what information we would send. We will only share your details with that firm once you have told us you want to go ahead.
The firm will give you its own quotation, terms of engagement and privacy notice. It decides how it uses your information for its own work and is responsible for that use.
If we would receive a referral fee from the firm, we will tell you the amount before you decide whether to go ahead.
Who we share information with
| Recipient | Why |
|---|---|
| Supabase | Stores Readiness Report requests in a database hosted in London. |
| Google (Workspace) | Sends us an email alert for each request and keeps a working copy of each request in a Google Sheet. |
| Vercel | Hosts the LevyBot website and keeps short-term technical logs, such as IP addresses. |
| postcodes.io | Receives the postcode directly from your browser, if you use the postcode lookup. |
| A professional firm you agree to be introduced to | To respond to you about a professional review, as explained above. |
We may also share information with our professional advisers, or with authorities where the law requires it. We do not sell your information.
International transfers
Supabase stores your request in London. Vercel and Google may process information in the United States, including when their staff provide support. Where that is a restricted transfer under UK data protection law, it is covered by the UK-US data bridge where the provider is certified under it, or otherwise by the UK International Data Transfer Addendum to the standard contractual clauses in that provider's data processing terms. You can ask us at hello@mediahubink.com for details of these safeguards.
How long we keep information
Levy check answers: these stay in your browser. We don't receive or keep them unless you send a request.
Requests that don't lead to paid work: we delete them automatically 12 months after our last contact with you.
Requests that lead to paid work: we keep the request, related correspondence and invoice records for six years after the work is finished, for our accounting obligations and to deal with any questions or claims.
Copies: we delete the email alert and Google Sheet copy of a request on the same timetable as the database record.
Technical logs and backups: Vercel keeps technical logs for a short period under its standard log retention. Supabase keeps database backups for a limited period, after which they are overwritten. If we ever restore a backup, we delete anything that should already have been deleted.
We may keep information for longer if we need it for an ongoing complaint, dispute or legal requirement, and we delete it once that has been resolved.
Cookies
LevyBot does not set cookies, does not store anything on your device, and does not use analytics or advertising trackers. The fonts are served from our own website.
Your rights
Depending on the circumstances, you have the right to ask for a copy of your information, to have it corrected or deleted, to restrict how we use it, and to receive it in a portable format. Email hello@mediahubink.com. We normally reply within one month. If the law lets us take longer, we'll tell you why and when to expect a reply.
Your right to object
You can object at any time to our use of your information based on legitimate interests, for reasons relating to your particular situation. We will stop unless we have compelling legitimate grounds to continue or need the information for a legal claim.
Complaints
If you are unhappy with how we have handled your information, please tell us and we'll try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You don't have to contact us first.
Changes to this notice
We will update this page if how we use information changes. The date at the top shows when it last changed.