Privacy policy

Last updated: 9 October 2026

This policy explains how we handle your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is the data controller

The data controller is Karol Slusarczyk, trading as Benefits Expert, a UK sole trader registered with the Information Commissioner's Office (ICO:00014179042). In this policy, "we", "us" and "our" mean Benefits Expert. You can contact us about your data at support@attendanceexpert.co.uk.

2. What we collect

We collect only what we need to provide the service:

• your name;
• your email address;
• the health information you choose to enter, so that we can write your answers; and
• technical and usage data, such as your device type, browser and how you move through the site.

The free preview needs your email address, because we send your free answer there and keep the free answer to one per person.

3. Special category health data

The information you enter about your health is "special category" data and needs extra protection under the law. We process it only with your explicit consent under Article 9 of the UK GDPR. You give that consent by ticking the consent box before you enter any health information. We use this data for one purpose only: to generate the answers you have asked us to write. You can withdraw your consent at any time (see "Your rights" below).

4. Our lawful bases

We rely on different lawful bases depending on the data:

• Consent for your special category health data (Article 9).
• Performance of a contract to deliver the product you have paid for.
• Legitimate interests to keep the service secure and to prevent abuse and fraud.

5. How we use your data

We use your data to write and deliver your answers, to take your payment, to send you the emails connected with your order, to provide support if you contact us and to keep the service safe and working properly. We do not use your health information for advertising, and we do not build any profile of you beyond what is needed to complete your order.

6. Who we share it with

We share your data only with the trusted providers who help us run the service:

• payments are handled by Stripe, who process your card details securely (we do not see or store your full card number);
• the answers themselves are generated using Anthropic's commercial API: the health information you enter is sent there to produce your text, and under Anthropic's commercial terms it is not used to train AI models, is retained by them only for a strictly limited period and is handled under a data processing agreement that requires confidential handling and prohibits any further use;
• a database run by Upstash (through our hosting provider) holds the coded forms and counts used to keep the free answer to one per person, for 30 days at most;
• emails to you are delivered through our email provider.

These providers act on our instructions and are bound to keep your data secure. We do not sell your data, and we do not share it with the DWP or any other third party except where we are required to by law.

7. How long we keep it

What you type is not kept on our servers once your answers have been built. The emails we send you (your free answer or your finished answers) stay in our business mailbox so that we can resend them and deal with support, refunds or payment disputes, and we delete them whenever you ask. We keep your data only for as long as we need it to provide the service, deal with any support or refund request and meet our legal obligations. After that, we delete it securely.

To keep the free answer to one per person, we keep coded forms (keyed hashes, which cannot be read back) of your email address and the question you chose (and, for an address that is not with one of the big email or internet providers, of the part after the @ sign), of your internet connection's IP address, of the random code in your browser's free answer cookie and, if you list several conditions, of that list and of each condition in it (each coded on its own), with the time of your free answer and a count. Nothing else you entered is kept with them, and they are deleted automatically after 30 days at most.

8. International transfers

Some of our providers may process data outside the UK. Where that happens, we keep transfers to those covered by appropriate safeguards, such as the UK's approved transfer mechanisms, so that your data stays protected to UK standards.

9. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct data that is wrong or incomplete (rectification);
• ask us to erase your data (erasure);
• withdraw your consent to us processing your health data at any time; and
• complain to the Information Commissioner's Office at ico.org.uk.

To use any of these rights, email us at support@attendanceexpert.co.uk. Withdrawing consent does not affect any processing we did before you withdrew it.

10. Cookies

We use essential cookies that are needed to make the site work, and optional analytics cookies that help us understand how the site is used. One of the essential cookies, aax_fd, is set when you get your free answer: a random code with no personal details in it, signed so that it cannot be altered, which lets us limit how many free answers one browser can get. It is sent only to our own servers, cannot be read by the page and expires after 30 days. The optional cookies are consent-gated: they are set only if you agree, and your choice is stored under our own cookie key. You can change your choice at any time. If you choose "Accept analytics", we also load Microsoft Advertising's Universal Event Tracking (UET) tag, which we use to measure our adverts. It sets Microsoft cookies and tells Microsoft which of our pages you visit and when a visit leads to a free answer, a started checkout or a purchase and its amount, but it never receives your name, email address or health details. We also keep our own note of which link brought you here: the link's UTM tags (for example which advert, video or post it was), whether an advertising click id was present (never the id itself) and the page you landed on. Without "Accept analytics" this note is kept in your browser only for the current tab. With "Accept analytics" it is also saved in your browser's local storage as aax_attr for up to 30 days, and choosing "Essential only" removes it. It only reaches us with a form you submit or a payment you start.

Our homepage has an embedded YouTube video that loads only when you press play, using YouTube's privacy-enhanced mode. Until then, nothing is loaded from YouTube or Google. When you press play, YouTube (Google) receives your IP address and may set cookies, under Google's privacy policy.

11. Contact us

If you have any question about this policy or about your data, please email support@attendanceexpert.co.uk and we will respond as soon as we can.