Privacy notice — planning agents

Privacy notice — planning agents, architects and consultants (APPROVED 2026-08-27)

APPROVED BY DAN, 27 August 2026 (869eqx27v): "I have read the complete GDPR pack, I approve all of it." The draft banner is lifted on every document in this pack at once, which is what he asked for. What his approval is not: it is not legal advice, no solicitor has read any of it (his decision of 2026-08-19, 869ef85a2), and it did not create the DPIA that §12.6 of the LIA says is needed before the first bulk-file sale — that DPIA was written on 2026-08-29 at his instruction (869eqy933 Q2) and is at docs/gdpr/DPIA-BULK-DATA-FILE.md; it is drafted and awaiting his sign-off, which is a different thing from approved. The history below is kept as written.

History — status was: DRAFT, 2026-08-25. Written by Claude for ticket 869enkace, as condition C4 of docs/gdpr/LIA-AGENT-ACQUISITION.md. Not legal advice, and no solicitor review is coming (Dan's decision of 2026-08-19, ticket 869ef85a2). Dan reviews, amends and approves before any letter is posted to an agent.

No letter has ever been posted to an agent, and none may be until Dan approves both the assessment and the batch. This notice is published ahead of the mailing rather than alongside it, so that the URL printed on the paper leads somewhere on the day the paper exists.

The contact address and the website now agree: both read justgranted.co.uk (869ee2apd, 2026-08-27). hello@planandpost.co.uk is an alias on the same mailbox and still receives, so anything sent to the address this notice used to print still reaches us.

Who we are, and who this notice is for

Just Granted is a trading name of Blueworkz Ltd (company number 13258077), registered at 39 Crispin Field, Pitstone, Leighton Buzzard, LU7 9BG, United Kingdom.

This notice is for you if you are a planning agent, architect, designer, surveyor or consultant whose name and business address appear on planning applications published by local planning authorities, and we have written to you, or may write to you, to tell you about Just Granted.

For this processing, Blueworkz Ltd is the data controller and the sender. Nobody else is behind the letter. That is the difference between this notice and our other two, and it is why it exists separately:

Planning applicants — people who submitted an application, written to by one of our subscribers, where the subscriber is the sender. That notice is at /legal/privacy/.
Customers — people who subscribe to Just Granted or leave us their email address. That notice is at /legal/privacy/customers/.

What we hold about you, and where it came from

Every local planning authority in the UK is required to keep a public planning register and to publish the applications made to it. Where an application is made through an agent, the register usually names that agent and gives their business address, because the authority corresponds with them about the application.

We collect planning applications from those registers. From the same records we hold, about you:

your name, or your firm's name, as the authority published it;
your business address, as the authority published it;
which applications you were named on, and at which authorities.

We did not get any of it from you, and we have no relationship with you. That is why you are reading this: Article 14 of the UK GDPR requires us to tell you when we hold data about you that we obtained from somewhere other than you.

We hold no email address, no telephone number and no financial information about you, because the registers do not publish them and we do not look for them elsewhere.

What we do with it

One thing: we may post you a letter about Just Granted, our service for building-trade businesses. That is direct marketing, by post, from us.

We do not email you, telephone you or text you. We do not build a profile of you, we do not score you, and we do not make any automated decision about you. We do not sell, rent or share the list with anyone, and we do not pass your details to our subscribers.

Our lawful basis

Legitimate interests — Article 6(1)(f) of the UK GDPR. Our interest is in reaching the businesses most likely to want the service, at a cost a company of our size can bear. We have written an assessment of that balance, weighing our interest against your rights, and we have recorded in it the places where the argument is weak as well as the places where it holds.

We rely on legitimate interests rather than consent because we have no way of asking you first: we hold no email address for you, and the only thing we could do to ask would be to post you the letter we are trying to justify.

Direct marketing by post is not covered by the Privacy and Electronic Communications Regulations, which apply to electronic messages. It is governed by the UK GDPR, and by your absolute right to object below.

You can ask us for the assessment. Email hello@justgranted.co.uk and we will send it to you.

How to stop letters (your right to object)

You have an absolute right to object to direct marketing — Article 21(2). There is no balancing exercise, you do not have to give a reason, and we do not ask you to prove who you are beyond enough to find your entry.

Email hello@justgranted.co.uk, or write to us at the registered address. Tell us the name and address the letter was sent to. We will:

add that office to our suppression list within 10 working days, marked as an objection about professional post to that office, so that it stops our letters to you and does not affect any householder who happens to share your postcode;
keep that suppression entry indefinitely, because deleting it would restart the post you asked us to stop;
confirm to you that we have done it.

One thing we want to be plain about, because it would be easy to imply otherwise: objecting stops the letters, it does not erase the planning record. Your name and business address remain in our copy of the public register, unused for marketing, on the retention timetable below — the same as they remain on the authority's own published register, which we do not control.

If you would rather we deleted the data entirely, ask, and we will treat it as an erasure request under Article 17 and answer it on its merits.

How long we keep it

Our published timetable is at /legal/retention/. The period for agent data is 24 months from the last time you appeared on an application we collected, matching the period for applicants — approved on 29 August 2026 and now in that timetable rather than proposed alongside it. Suppression entries are kept indefinitely, for the reason above.

We also do not keep a marketing list of you. The list of firms to write to is worked out fresh each time from the applications we hold and thrown away when the batch is composed, so an agent who drops out of the register drops out of the channel without anybody having to remember to remove them.

Your other rights

You have the right to ask us for a copy of the data we hold about you, to have it corrected if it is wrong, to have it erased, to restrict what we do with it, and — as above — to object. Email hello@justgranted.co.uk and we will answer within one month.

If you are not satisfied with our answer, you can complain to the Information Commissioner's Office: ico.org.uk, or 0303 123 1113.

Sharing, processors and transfers

You are not in the data file we license. From 2026-08-27 we intend to license a bulk file of planning-application data to organisations who want it for market research. What is in that file is the applicant's details and the application — never an agent's name, firm or office address. Those fields are held in a different system from the one the file is cut from, they are not among the columns it contains, and adding them would be a different decision with its own assessment. Nothing has been sold.

If we post you a letter, the printing and posting are done by Stannp Ltd, a UK print-and-post provider acting as our processor under an Article 28 contract. They receive your name and address for the purpose of producing and posting that one letter.

We use hosting and email providers in the United Kingdom and the European Economic Area to run the service. We do not transfer your data outside the UK or the EEA for this purpose.