GDPR Compliance
Your Data, Your Control, Your Responsibility
Last updated: November 3, 2026
We Are NOT a Data Processor
Because Simple Data Cleaner processes all data entirely in your browser (client-side), we never receive, store, or process your data. This means under GDPR, we are not acting as a data processor. You remain the sole data controller with full responsibility and control.
How Client-Side Processing Protects You
Upload Happens Only in Your Browser
When you select a file, it's read using JavaScript in your browser. The file content never leaves your computer's memory.
Processing is Local
Validation algorithms run entirely in your browser's JavaScript engine. No network requests are made to send your data anywhere.
Download Stays Local
When you download the cleaned file, it's generated in your browser and saved directly to your device. We never see it.
Memory is Cleared
When you close the browser tab, all data is removed from memory. Nothing persists on our servers.
GDPR Legal Basis
For Personal Data We Store (Account Information)
We only collect and process the following account information:
- Email address
- Hashed password (using bcrypt)
- Name (if provided)
- Subscription status and billing information
- Usage metrics (for service limits)
Legal Basis: Legitimate interest - we need this information to provide you with the subscription service you requested and to manage your account.
For Data You Clean (Your Files)
We do NOT process, store, or have any access to the data files you clean.
Legal Basis: Not applicable - since we never receive this data, GDPR data processing rules don't apply. You remain the sole data controller.
Your GDPR Rights
Right to Access
You can request a copy of all personal data we hold about you (account information only). Contact us to make a request.
Right to Rectification
You can update your account information at any time through your Account Settings page.
Right to Erasure (Right to be Forgotten)
You can delete your account at any time. This permanently removes all personal data we hold about you. Contact us to request account deletion.
Right to Data Portability
You can export your account data in a machine-readable format. Contact us to request an export.
Right to Object
You can object to our processing of your personal data for marketing purposes. We don't send marketing emails, but you can update preferences in your account.
Data Retention
Account Data: We retain your account information for as long as your account is active. After you cancel your subscription, we retain data for 30 days to ensure smooth account restoration if needed.
Deleted Accounts: When you delete your account, all personal data is permanently removed within 7 days.
Billing Records: Financial transaction records are retained for 7 years as required by UK tax law.
Your Files: Never stored, so no retention period applies.
Security Measures
We implement appropriate technical and organizational measures to protect your account data:
- HTTPS encryption for all data transmission
- Passwords hashed with bcrypt (industry standard)
- Prepared statements to prevent SQL injection
- Input validation and sanitization
- Regular security updates
- Access controls and authentication
For more details, see our Security & Privacy page.
Data Sharing and Third Parties
We do not sell your data. We do not share your account information with third parties except:
- Payment Processors: We use Stripe for payment processing. Your payment information is handled directly by Stripe and never stored on our servers.
- Legal Requirements: If required by law or to protect our legal rights.
How to Verify Our Claims
You Can Verify Our Privacy Claims
- Open your browser's Developer Tools (F12)
- Go to the "Network" tab
- Select and process a file using Simple Data Cleaner
- You'll see NO file uploads or data transmission to our servers
- The only network requests will be for JavaScript files (our code)
Contact & Complaints
If you have any questions about our GDPR compliance or wish to exercise your rights, please contact us.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk
Further Reading
For a deeper look at what UK GDPR requires from your customer data, and how to decide between a data cleansing consultant and a self-serve tool, see our guide: UK Data Cleansing for GDPR Compliance.