Privacy notice
Last updated 10 October 2026.
This notice explains how Ultimate Vision Ltd uses personal data when you use ideavalidation.co.uk. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who we are
The data controller is Ultimate Vision Ltd, registered in England and Wales, company number 14613662, registered office Office 4 Kingsway North, Team Valley Trading Estate, Gateshead NE11 0JH, United Kingdom. Contact for anything in this notice: info@ultimatevision.uk.
2. The free Reality Check collects nothing
The Reality Check is a program that runs inside your browser. The idea you type and the boxes you tick are processed on your own device by fixed rules. They are not sent to us, not sent to any AI service, not logged and not stored. You can confirm this in your browser's network tab: running the check makes no request. When the page loads it asks our server one yes/no question (whether online payment is switched on); that request contains no idea text.
3. What we collect and why
| What | Why | Lawful basis (UK GDPR Article 6) |
|---|---|---|
| Audit request: name, email, chosen audit, your idea, optional link, what you already have, the free-check indexes if you ran it, and your consent to start work | To reply, agree the scope and deliver the audit | Steps you asked for before a contract, then performance of the contract (6(1)(b)) |
| Payment details handled by Stripe: we receive your name, email, amount, payment status and a payment reference. We never see or store your full card number. | To take payment, issue refunds and keep accounts | Contract (6(1)(b)) and legal obligation to keep financial records (6(1)(c)) |
| Emails you send us | To answer you and handle complaints | Legitimate interests in running the service (6(1)(f)) |
| Time of request, IP address and browser string; standard web server logs | To stop spam, abuse and fraud and to keep the site secure | Legitimate interests (6(1)(f)) |
| Page views counted without cookies (page, referrer, screen size, country) | To understand which pages are useful | Legitimate interests (6(1)(f)) |
We do not use your details for marketing, we do not sell them, and we never publish your idea. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects (UK GDPR Article 22). The free check is automated but runs on your device and has no such effect.
4. Who we share data with
- Stripe Payments Europe Ltd and its group, to process card payments. Stripe acts as an independent controller for some purposes such as fraud prevention; see stripe.com/gb/privacy.
- Our hosting provider, which operates the server that runs this site, stores audit requests and handles our email.
- AI research and writing tools, used when preparing a paid audit. We send them the idea and context needed for research. We do not send your name or email address.
- Professional advisers (for example accountants or lawyers) where needed, under a duty of confidentiality.
- Law enforcement, regulators or courts, only where the law requires us to.
5. International transfers
Our web server is located in Turkey, and some of the services above (including Stripe and AI providers) may process data in the United States or elsewhere outside the UK. Where a country is not covered by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified US organisations), we transfer data only with an appropriate safeguard under UK GDPR Article 46, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguard that applies.
6. How long we keep data
| Data | Kept for |
|---|---|
| Audit requests that do not become an order | 12 months from the request, then deleted |
| Your idea and the audit we deliver | 12 months from delivery (so you can ask for a revision or raise a complaint), then deleted |
| Order and payment records (name, email, amount, date, reference) | 6 years from the end of the financial year, as required for UK tax and company records |
| Emails with you | Up to 2 years from the last message, unless part of an order record |
| Abuse-prevention data (IP address, browser string) and server logs | Up to 6 months |
| Page-view counts | Kept as anonymous totals |
We may keep data longer only if we need it to establish, exercise or defend a legal claim.
7. Security
Requests are stored outside the public web folder, the site only accepts encrypted connections (HTTPS), access to the server uses keys rather than passwords, and only people who need the data to deliver your audit can see it. No system is perfectly secure, so please do not send us anything you would not want stored, such as passwords or third-party confidential information.
8. Your rights
Under UK data protection law you can ask to access your data, correct it, delete it, restrict or object to its use, and receive a copy in a portable format. Where we rely on consent you can withdraw it at any time. Email info@ultimatevision.uk; we will answer within one month. There is normally no charge.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113.
9. Cookies
This site sets no cookies and uses no advertising or tracking pixels. Our page counter works without cookies. If you choose to pay, Stripe's checkout page (on stripe.com) uses its own cookies, which are needed for payment and fraud prevention and are covered by Stripe's notices.
10. Age
This service is for people aged 18 or over. We do not knowingly collect data from children.
11. Changes
We will update this notice when our practices change and show the date at the top. Material changes that affect an active order will be emailed to you.