ASC Info Center Limited
Company No. 16795720
ASCVerify.site is an online security and verification tool operated by ASC Info Center Limited.
Privacy Policy
This notice explains what personal data ASCVerify processes, why, on what legal basis, for how long, who receives it and how you can exercise your rights.
Last updated: 2026-10-23
This notice describes the service as currently built. It has not yet been confirmed by a qualified UK legal reviewer and is not a certificate of compliance.
Who is responsible
The controller is ASC Info Center Limited, company number 16795720, registered in England and Wales. Registered office: 22 Heol Parc Maen, Merthyr Tydfil, Mid Glamorgan, United Kingdom, CF48 1LF. ASCVerify is its product.
The operator handles privacy requests through the postal contact below. This notice does not establish registration or certification by a data protection authority.
How to contact us
Send privacy requests by post to the registered office, addressed "Privacy Request". Please describe your request and include enough information for us to find the relevant record, for example the account email address or report reference.
As secondary channels you may use the optional website chat (only after you activate it) or the founder LinkedIn profile. Do not send passwords, card numbers or identity documents through any channel. We may ask for limited additional information only where needed to confirm that a request comes from the right person.
ASC Info Center LimitedPrivacy Request
22 Heol Parc Maen
Merthyr Tydfil
Mid Glamorgan
CF48 1LF
United Kingdom
What data we process
Account data: your email address, sign-in and authentication data, session identifiers and short-lived sign-in tokens.
Credits and payments: credit balance, purchases and usage records. Card payments are processed by Stripe; we do not receive or store your full card number.
Check inputs and results: website addresses, app listings, photos, QR codes and PDF files you submit, and the resulting reports. Raw uploads are processed temporarily to produce the result.
Technical data: IP address, browser user agent, request time and similar information in server logs, and cookies or local storage needed for the service.
Chat messages: only if you choose to activate the optional external chat.
Please submit only the minimum needed for a check. Do not include passwords, card details, identity documents or other people’s sensitive data in URLs, files or messages.
Purposes and legal bases (UK GDPR)
Contract: to run the checks you request, provide your account, sign-in, credits and report recovery.
Legitimate interests: to keep the service secure and prevent fraud and abuse, for example rate limiting, logging and detecting misuse. This processing is necessary because a public checking service is otherwise easily abused; we limit it to what is needed. You have the right to object, and we will then stop unless we have compelling legitimate grounds or need the data for legal claims.
Legal obligation: to keep financial and transaction records required by law.
Consent: to load the optional external chat, which you activate by an explicit click. You can withdraw consent at any time; withdrawal does not affect processing that took place before.
Saving a private report backup is a separate explicit choice that you make for that report. Using ASCVerify does not depend on a blanket GDPR consent.
How long we keep data
Sessions last up to 30 days; sign-in tokens expire after 30 minutes. The wallet cookie that links your browser to its credits lasts up to 90 days.
A structured report kept for recovery is retained for 24 hours. If you choose an optional private backup, it is kept for up to 90 days and you can delete it earlier.
Raw uploads are temporary and are not kept as part of the report.
Accounts and the credit ledger are kept while needed to provide the service, and are deleted when you request account deletion, except for records we must keep for legal or financial reasons. We do not state a fixed accounting retention period here; it depends on the applicable legal requirement.
Web server (nginx) logs are rotated daily and 14 archives are kept, so roughly 14 days plus the current log. Server backups may contain this data until they are rotated out.
Who receives data
Stripe processes card payments. Contabo provides server hosting. An SMTP email provider delivers security and sign-in emails. OpenAI processes content where an AI-generated explanation is part of the check you request. tawk.to processes chat data only after you activate the chat.
Some checks query public sources with the identifier you submit, for example domain registration data (RDAP) or app store listings. ASCVerify does involve external processing; we do not claim otherwise.
We do not sell personal data. We may disclose data where required by law or to protect rights and safety.
International processing
Some providers may process data outside the UK or EEA, including in the United States. The applicable contracts and safeguards for each provider still require operator review; this notice does not claim that data processing agreements, standard contractual clauses or adequacy arrangements have been verified. See each provider’s privacy policy below.
Hashes and pseudonymised data
Some records use hashes or other identifiers instead of plain values. These are pseudonymised, not anonymous, and are still treated as personal data where they can be linked to a person.
Automated decisions
ASCVerify does not make automated decisions that have legal or similarly significant effects on you. Scores and reports are information and require human judgement.
Your rights
You have the right of access, rectification, erasure, restriction, data portability where applicable, the right to object, and the right to withdraw consent at any time without affecting earlier processing.
We normally respond within one month. Where a request is complex or numerous, this can be extended as permitted by law and we will tell you why.
Complaints
You can complain to the UK Information Commissioner’s Office (ICO). If you are in the EU or EEA, you may also contact your local data protection authority where applicable. We would appreciate the chance to address your concern first.
Children and monitoring
ASCVerify is not designed for children and is not a tool for monitoring or surveilling children or other people.
Changes to this notice
We will update this notice when the service or its providers change, and show the new date at the top.
Third-party privacy policies
ASCVerify is not an investment platform, broker or bank. It does not manage investments, accept investment deposits or promise financial returns.
Evidence and limitations
Reports describe available evidence and uncertainty. No score or badge guarantees safety, authenticity, regulatory authorisation or future behaviour. Unavailable checks have not been performed. Some checks are paid; prices and free-scan allowances are shown in the interactive tools.
For investment decisions, independently check the official regulator’s register and warning list. ASCVerify does not currently claim direct FCA Register or Companies House verification.
ASCVerify.site is the exact domain for this service. A similar service name alone does not establish identity or ownership. A missing search result or unavailable page is not by itself proof of fraud or safety.
What ASCVerify checks — and what it does not guarantee
What is ASCVerify?
ASCVerify.site is operated by ASC Info Center Limited, company number 16795720, England and Wales. It helps assess website links, profiles and supported files for available warning signs. It is not a bank, broker or investment platform.
How do Stripe payments work?
Paid checks use Stripe Checkout. Review the displayed service and price before paying; card details are entered on the Stripe-hosted payment page. Payment references may be retained to confirm a purchase. Stripe processes the payment, not the verification evidence, and does not endorse a checked website or guarantee the report.
What does SHA-256 mean?
Profile verification uses SHA-256 to create a fingerprint of the normalised submitted URL for its verification record. A matching fingerprint can support comparison of that input. SHA-256 is hashing, not encryption, proof of identity, an issuer’s digital signature or a certificate that a website is safe. A hash alone does not anonymise every related record.
Does a high score or badge prove safety?
No. Results describe available signals and uncertainty, not guaranteed legitimacy or future behaviour. An unavailable check was not performed. Before investing, independently verify the operator and authorisation with the relevant regulator. Direct FCA Register and Companies House verification are not currently claimed.
Are all checks free and is no data stored?
No. Some checks are paid; current prices and free allowances appear in the relevant tool. Submitted inputs, technical records and payment references may be processed or retained according to the service and its privacy information. Do not submit passwords, private tokens or unnecessary personal data. A hash is not a promise that no data is stored. A customer account stores the email for sign-in and security messages; a report is kept for 90 days only if you choose to save it, and you can delete it earlier.
Can you certify a diploma or prove who issued a document?
A PDF or image analysis may identify warning signs but does not establish a document’s issuer, a person’s identity or official recognition of a qualification. Confirm issuance with the relevant issuing organisation or official registry. An ASCVerify badge is not a regulated qualification certificate.