Privacy notice
How companydig uses personal data: about the directors and owners shown on the site, and about the people who visit it. Last updated 4 November 2026.
Who we are
companydig is run by nexus6 interactive, based in South Africa. We are the responsible party (under South Africa's Protection of Personal Information Act, POPIA) and the controller (under the UK GDPR) for the personal data described here. You can reach us, and our information officer, through our contact form.
People shown on the site
companydig shows the directors, secretaries and people with significant control (owners) of UK companies, as recorded on the public register at Companies House. For each person we show what the register publishes:
- name, and the month and year of birth (never the full date)
- nationality, country of residence and occupation
- their appointments and shareholdings, and when each began and ended
- names that appear in the companies' filed accounts and insolvency documents, such as directors who signed the accounts and the insolvency practitioners appointed
Where it comes from. Companies House, through its public data API, its document API and its bulk snapshot of people with significant control. We don't collect anything about these people from anywhere else, and we don't show residential addresses or anything Companies House has suppressed.
Why we use it, and on what basis. To let people understand who runs and owns UK companies and how those companies have performed, which is the purpose the public register serves. We rely on our legitimate interests, and those of the people using the site, in that transparency (UK GDPR Article 6(1)(f); POPIA section 11(1)(f)). We've weighed those interests against the rights of the people named: the information is already public, is limited to what the register shows, and relates to people's roles in companies, not their private lives.
How long we keep it. We keep a copy of register data so pages load quickly. It is refreshed from Companies House, usually within a day to a week, so changes and removals on the register reach the site in that time. We keep it while the company it relates to is on the site.
People who visit the site
- Analytics cookies, only if you accept. When you first visit, the site asks
whether you accept Google Analytics cookies. If you decline, or don't answer, Google Analytics isn't loaded and
no cookies are set. If you accept, Google Analytics sets cookies (named
_gaand_ga_…, lasting up to two years) and tells us, in aggregate, which pages are visited, how visitors arrived and roughly where they are, by country and city. Google Analytics doesn't log or store your IP address. We use it to see how the site is used and improve it; our basis is your consent. You can change your mind at any time with the Cookies link at the foot of every page; declining removes those cookies. - Settings kept in your browser. Your browser stores your answer to the cookie question and the units you choose for figures, so they're remembered next time. These are never sent to us.
- IP addresses. We use your IP address to limit how fast any one visitor can use the site, so it stays available to everyone. Those limits are held in memory and forgotten when the server restarts. Our web server's logs record IP addresses, pages requested and times, which we keep for up to 30 days to run and secure the site. Our basis is our legitimate interest in keeping the site working and secure.
- Searches and page views. We count how often each company's page is viewed, to show recently viewed and popular companies. Those counts are not linked to you.
- Fonts. Pages load the Inter typeface from Google Fonts, so your browser sends your IP address to Google when it fetches the font.
- Messages you send us. If you use the contact form, we keep what you write, your email address and your name if you give it, to answer you and keep a record of what we did. We delete messages two years after they're sent. The form uses no third-party CAPTCHA.
Who else handles the data
- Contabo hosts the site, in the European Union (Germany).
- Cloudflare carries traffic between your browser and our server and protects the site from attacks. It sees your IP address and the pages you request while doing so.
- Anthropic reads some scanned pages of company accounts that our own text recognition can't read reliably. Those pages are profit and loss accounts and balance sheets, which rarely name anyone. Anthropic processes them on our behalf in the United States under its commercial terms, which don't allow it to train its models on them.
- Google serves the font, as above, and, only if you accept analytics cookies, provides Google Analytics as our processor. Google may process that data in the United States.
The data is therefore processed in South Africa, the European Union and the United States. We don't sell personal data or share it with anyone else, except where the law requires us to.
Your rights
Whether you're named on the site or visit it, you can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict how we use it, or object to our using it. Use our contact form (choose "My personal data" or "I object to appearing on the site") and we'll reply within a month.
- If the information is wrong, it is usually wrong on the register too. Ask Companies House to correct it; the site follows the register. Tell us as well and we'll refresh our copy.
- If you object to appearing on the site, tell us why. We'll weigh your circumstances against the reasons for showing register data, and remove or limit what we show where your interests should come first, for example where your safety is at risk.
You can also complain to the UK Information Commissioner's Office (ico.org.uk) or South Africa's Information Regulator (inforegulator.org.za).
Changes
If we change how we use personal data, we'll update this notice and its date, and note the change in the changelog.