Privacy Policy

Last updated: 30 May 2026

FirmFox ("we", "the service") provides an API that returns UK company information sourced from public official registers. This policy explains what data we process and how.

1. Data we process

Query inputs — the company numbers, VAT numbers or search terms you send to the API.
Operational logs — minimal request metadata (timestamp, endpoint, cached/not) used for reliability, abuse prevention and rate limiting.
Account/billing — when you subscribe via RapidAPI, RapidAPI handles your account, authentication and payment data; we receive only the data needed to serve your requests.

2. Source data

Company and officer data comes from UK Companies House (Crown copyright, Open Government Licence). VAT validation comes from HM Revenue & Customs. This is official public-register data; we do not enrich it with third-party personal data.

3. How we use data

Solely to provide and operate the API: answer your requests, cache responses for performance, enforce limits, and prevent abuse. We do not sell your data and we do not use it for advertising.

4. Retention

Responses may be cached for up to 24 hours to improve performance. Operational logs are kept only as long as needed for reliability and security.

5. Sharing

We do not share your query data with third parties, except infrastructure providers strictly necessary to run the service (e.g. hosting). Billing/account data is handled by RapidAPI under their own privacy policy.

6. Security

All traffic is encrypted over HTTPS. Access to the backend is restricted and secrets are stored securely.

7. Your rights

Under UK GDPR you may request access to, correction of, or deletion of personal data we hold about you. Contact us below.

8. Contact

Email: leandro@firmfox.co.uk

FirmFox is an independent service and is not affiliated with Companies House or HM Revenue & Customs.