Privacy — NAPC Client Portal

This portal is operated by NAPC to let clients follow the progress of their planning applications. This notice explains what personal data the portal holds and why.

What we hold

Your name and email address (to sign you in and notify you), the contact details you gave us when you first enquired (name, email, phone and correspondence address, copied from our case-management system so we know which applications are yours), details of your planning applications (addresses, references, dates and status), documents we prepare for your application, messages you send us through the portal, and your questions to the automated assistant.

Why we hold it

To perform our contract with you: managing your planning application and keeping you informed. We do not use your data for marketing and we do not sell it.

Who processes it for us

We use a small number of trusted providers to run the portal. They act on our instructions under data-processing agreements:

Monday.com — our case-management system, the source of your application details.
Supabase and Vercel — database, sign-in and document storage, and hosting (United Kingdom / London region).
Resend— sends the portal's notification and sign-in emails.
Anthropic — powers the automated assistant. Your questions are not used to train its models.
postcodes.io — a public UK postcode service used to place applications on a map. Only the site postcode is sent, never your name or full address.

Portal data is held in the United Kingdom. This list may change; email info@napc.uk for the current set of providers.

Cookies

The portal sets only strictly necessary cookies — those that keep you securely signed in. We do not use advertising or analytics cookies and we do not track you across other websites, so no cookie banner is required.

How long we keep it

We keep application records in line with our file retention policy (typically six years after your matter completes), after which they are deleted.

Your rights