RegisterStream Privacy Policy

We collect, ingest, and process publicly available corporate and business-related records from official statutory registries. This includes company names, Company Registration Numbers (CRNs), registered office and operating centre addresses, secured charge identifiers (MR01/MR04/MR05), operator and permit applications, and full names and public addresses of active corporate directors, Persons with Significant Control (PSCs), and designated transport/environmental managers.

We do not ingest or process consumers' personal data, personal payment data, or non-commercial personal identifiers.

To the extent that public-registry entity resolution processes personal data associated with corporate officers and managers, we rely strictly on the UK GDPR and EU GDPR Article 6(1)(f) "Legitimate Interests" as our lawful basis.

The Purpose

Normalizing and delivering high-value regulatory early-warning alerts, security priority, and B2B credit-risk tracking to the commercial finance, contracting, and logistics sectors.

The Necessity

B2B commercial lenders, equipment lessors, and contractors require accurate, enriched register timelines to evaluate solvency, secure priority, and evaluate regulatory compliance where lagging public registries present fraud and bankruptcy risk.

The Balance

Ingested personal identifiers are strictly limited to public corporate filings, statutory undertakings, and commercial site specifications already subject to legal mandatory public disclosure, presenting minimal intrusion to corporate directors and professional individuals.

Any business-development email dispatch or alert produced using RegisterStream contacts complies with the Privacy and Electronic Communications Regulations 2003 (PECR). Under PECR corporate subscriber rules, B2B digital direct marketing may be sent to employees, partners, and officers of corporate bodies (@company.co.uk) without prior opt-in consent, provided:

• The sender is clearly identified.
• The content is strictly limited to relevant B2B operational, credit, or commercial contracting workflows.
• A frictionless opt-out / suppress button is included in every email.

We secure database environments using encryption-at-rest (AES-256), encryption-in-transit (TLS 1.3), and restrictive role-based accesses. Access logs and token histories are continuously monitored.

If you are an active director, partner, or transport manager whose public register records have been enriched, you retain the full DPA 2018 / GDPR rights (access, rectification, erasure, and objection). Since we are not the primary statutory register, any erasure requests are processed as immediate permanent suppression/un-enrichment in our feeds. Direct your objection to support@registerstream.com.

All processing occurs on cloud servers located in the United Kingdom or the European Economic Area. Transfers outside of these regions are governed by standard contractual clauses or authorized data bridges.