Privacy policy

The operator of british-passport.co.uk (“we”, “us”) is the data controller for personal data collected through this site. Full operator details — including registered office, company number and intra-community VAT — are listed on the Legal mentions page. This policy explains what we collect, why, and your rights under the EU GDPR (and the UK GDPR for UK residents).

Data we collect

• Identity data (name, DOB, place of birth, gender) to complete your HMPO application.
• Contact data (email, phone, UK address).
• Passport data (number, dates, issuing office, reason for renewal).
• Photo data (upload or booth code) used for the compliance check.
• Identity confirmer contact (name, email, relationship).
• Payment metadata (never your card number — card data is handled directly by Revolut).
• Usage data (IP, pages, device) via privacy-respecting analytics.

Why we process it

To provide the renewal concierge service you have contracted with us (Art. 6(1)(b) UK GDPR).

Who we share it with

• HM Passport Office — for the purpose of submitting your application.
• Revolut — payment processing.
• Resend — sending transactional email.
• Cloudinary — secure image hosting.
• Anthropic — AI photo compliance review (no personal identifiers sent with the image).

Retention

Application data is retained for 7 years to meet HMRC and anti-fraud obligations, then deleted.

Your rights

You can request access, correction, erasure, portability, and restrict or object to processing. Contact privacy@british-passport.co.uk. You may also lodge a complaint with the CNIL (cnil.fr) in France or, if you are a UK resident, the ICO (ico.org.uk).