Why we can write to you
Why we are allowed to write to you — our legitimate interests, in short
Renamed 2026-08-20 (ticket 869em1n5x), and the contact address followed on 2026-08-27 (869ee2apd): the trading name changed from Plan & Post to Just Granted, and the address to write to is now hello@justgranted.co.uk on Dan's instruction. The controller is unchanged — Blueworkz Ltd, company number 13258077. hello@planandpost.co.uk is the same mailbox and still receives, so a letter or an objection sent to the old address is not lost.
APPROVED BY DAN, 27 August 2026 (869eqx27v): "I have read the complete GDPR pack, I approve all of it." The draft banner is lifted on every document in this pack at once, which is what he asked for. What his approval is not: it is not legal advice, no solicitor has read any of it (his decision of 2026-08-19, 869ef85a2), and it did not create the DPIA that §12.6 of the LIA says is needed before the first bulk-file sale — that DPIA was written on 2026-08-29 at his instruction (869eqy933 Q2), is at docs/gdpr/DPIA-BULK-DATA-FILE.md, and he signed it off separately on 2026-08-30 (869erd3f6 §3.1, "sign it off as written") — a different act from the pack approval above, and one that cleared a single condition (C8) rather than opening a sale: no bulk data file has ever been sold, offered for sale, or produced. The history below is kept as written.
History — status was: DRAFT (2026-08-11), awaiting approval. This is the public summary of the legitimate interests assessment we carry out for the Just Granted letter service. It is written for the person who received a letter, not for a lawyer. The full internal assessment is longer and more technical; ask us and we will talk you through it.
Just Granted is a trading name of Blueworkz Ltd (company number 13258077), registered at 39 Crispin Field, Pitstone, Leighton Buzzard, LU7 9BG. Contact us at hello@justgranted.co.uk.
The short version
If you submitted a planning application, your local council published it on a public register that anyone may read — that is what the register is for, and it is required by law. We take the details from that register and let building-trade businesses write to you, by post only, about work related to your application.
We do that under Article 6(1)(f) of the UK GDPR — legitimate interests. That basis requires us to weigh what we and our subscribers get out of it against your rights and your reasonable expectations. We have done that in writing, we keep it under review, and this page is the summary.
What we weighed
Our interest, and our subscribers'. Small building firms need to reach people who have a live project. A householder with planning permission usually does want quotes, and a letter that arrives at the right moment is genuinely useful to both sides.
Necessity. We cannot do this without the applicant's name and site address, because the letter has to arrive. We use no more than that: no telephone numbers, no email addresses, no financial data, no special category data, and no profiling or automated decision-making about you.
Your side of the balance. The information is already public and you submitted it yourself, so a letter about your own building project is not a surprise in the way an unexplained cold contact would be. Even so, we accept that a member of the public does not put an application on a register in order to receive post, so we constrain what we do:
- Post only. No marketing email, no text messages, no phone calls to applicants — ever. Post is the least intrusive channel there is: you can put it in the recycling and that is the end of it.
- At most two letters per subscriber per application — one when the application is submitted, one when it is decided. That ceiling is enforced by the system, not left to good intentions.
- An absolute right to stop. See below. It is free, needs no reason, and works across every business using the service.
- Published retention periods, so the data does not sit with us indefinitely.
- Every letter tells you where the details came from, who sent it, and how to stop further letters. That is printed on the paper by the system that posts it; a subscriber cannot remove it.
One thing we are still working out
We intend to license a weekly file of planning-application data to organisations who want it for market research, for a fee. That is a different thing from posting you a letter, so we have assessed it separately rather than assuming the same answer, and we have written down where it is harder to justify: once a file has been sent to somebody, we cannot take it back, so an objection you make afterwards stops you appearing in future files and obliges the recipient by contract to drop you, rather than undoing what they already have.
Two safeguards apply from the first file: anyone who has objected is removed before the file is produced — automatically, with the production refusing to run if the objection list is missing or stale — and every recipient is a named organisation under a written contract, not an anonymous buyer. Nothing has been sold, and nothing will be until this has been approved.
Our conclusion
Weighing those together, our view is that our interests and our subscribers' are not overridden by your interests, rights and freedoms — on the strict conditions above, and no further. If we ever wanted to contact applicants by another channel, write more often, or use the data for something else, that would be a different question and this assessment would not cover it.
Stopping letters
Under Article 21 of the UK GDPR you have an absolute right to object to direct marketing. There is no balancing test on our side of that one: you object, we stop.
Email hello@justgranted.co.uk, or write to us at the registered office above. Quote the reference printed on your letter if you have it — it helps us find the right address — but it is not required, and we never ask for a reason or for proof.
We add you to our suppression list within 10 working days, usually much sooner. That list applies to every business using Just Granted, not just the one that wrote to you, and it also removes you from the data any subscriber can download from us in future. We keep the entry for as long as we operate, because deleting it would restart exactly the letters you asked us to stop.
Reviewing this
We review the assessment behind this summary at least once a year, and sooner if anything material changes — the channels we use, how often a letter can be sent, what data we collect, or who receives it.
You can also complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first, but the route is yours.