Last updated: 9 October 2026
Data Controller
ADPexpert is operated by Karol Slusarczyk trading as Benefits Expert, a self-employed sole trader registered with HMRC in the United Kingdom. As a sole trader, Karol Slusarczyk is the data controller for the purposes of UK GDPR.
Business address: Redditch, United Kingdom. Contact: support@adpexpert.co.uk.
We are registered with the UK Information Commissioner's Office (ICO) under the Data Protection (Charges and Information) Regulations 2018. Our ICO registration number is ICO:00014179042. You can verify our registration on the ICO public register.
What Data We Collect
When you use our report generator, you enter your name, health conditions and a description of how they affect your daily life. If you purchase a paid plan, we also collect your email address (via Stripe) to deliver your report.
If you choose to provide your email address in our free preview tool, our free Consultation Prep questions or our re-determination letter generator, we collect that email so we can send you the requested guidance and occasional follow-up ADP tips. The free preview and the free Consultation Prep questions need your email address, because we send your free answer there and keep the free answer to one per person.
Our website also automatically captures limited technical context when you submit a form: the page you were on, the website that referred you to ADPexpert, and any tracking parameters in the URL (such as UTM tags or ad-click identifiers). This helps us understand which content and channels are useful to visitors. No browser fingerprinting, no cross-site tracking.
Special Category Data
The health information you provide is special category personal data under Article 9 of the UK GDPR. We process this data under Article 9(2)(a) - explicit consent, which you give by ticking the consent box before generating your report.
You can withdraw consent at any time by emailing support@adpexpert.co.uk. Withdrawal does not affect processing already carried out.
How We Process Your Data
Your data is sent over HTTPS to our generation system and used solely to produce your personalised guidance. Your inputs are not retained or used for any further purpose, and we do not share them with anyone except the processors listed below.
Marketing Communications (Opt-In Only)
If you provided your email address in our free preview tool or our re-determination letter tool, we may send you occasional emails containing ADP form tips, descriptor explanations, evidence checklists and updates about our paid products. We process your email under Article 6(1)(a) of the UK GDPR - consent, which you give by entering your email address into the form (alongside the on-page notice that explains what you will receive).
We never share, sell or rent your email to anyone else. You can unsubscribe at any time by:
- Replying "unsubscribe" to any email we send you, or
- Emailing support@adpexpert.co.uk with "unsubscribe" in the subject line.
If you have not interacted with any of our emails for 24 months, we will automatically remove your address from our list to avoid emailing inactive contacts.
Third-Party Processors
- Stripe (payment) - handles card payments; we never see card details.
- Report generation processor - your personalised guidance text is generated using Anthropic's commercial API. Under its commercial terms your inputs are not used to train AI models, are retained by the provider only for a strictly limited period, and are handled under a data processing agreement that requires confidential handling, prohibits any further use, and incorporates the safeguards UK GDPR requires for transfers outside the UK. Questions about this arrangement are welcome at support@adpexpert.co.uk.
- Zoho Mail (email) - delivers your report and stores support correspondence.
- Vercel (hosting) - serves the website and keeps short-term request logs (typically 30 days).
- Upstash (database, through Vercel): holds the coded forms and counts used to keep the free answer to one per person, for 30 days at most.
- Google Analytics & Google Ads (optional, only with cookie consent) - usage statistics and advertising performance.
- Microsoft Advertising (optional, only with cookie consent) - advertising performance.
What We Don't Do
We do not sell your data. We do not share it with third parties for marketing. We do not use the health information you enter into the generator for any purpose other than producing your guidance and supporting you afterwards. Email addresses you opt in to give us are used only by ADPexpert to send you ADP-related guidance and product updates - never passed to anyone else.
Cookies
Essential cookies keep the site working. One of them, adp_fd, is set when you get your free answer: a random code with no personal details in it, signed so that it cannot be altered, which lets us limit how many free answers one browser can get. It is sent only to our own servers, cannot be read by the page and expires after 30 days. If you choose "Accept all" on the cookie banner, Google Analytics, Google Ads and Microsoft Advertising load. Microsoft Advertising's Universal Event Tracking (UET) tag, which we use to measure our adverts, sets Microsoft cookies and tells Microsoft which of our pages you visit and when a visit leads to a free answer, a started checkout or a purchase and its amount, but it never receives your name, email address or health details. We also keep our own note of which link brought you here: the link's UTM tags (for example which advert, video or post it was), whether an advertising click id was present (never the id itself) and the page you landed on. Without "Accept all" this note is kept in your browser only for the current tab. With "Accept all" it is also saved in your browser's local storage as adp_attr for up to 30 days, and choosing "Essential only" removes it. It only reaches us with a form you submit or a payment you start. Analytics tags never load without your explicit consent. Change your preference by clearing this site's local storage.
Our homepage has an embedded YouTube video that loads only when you press play, using YouTube's privacy-enhanced mode. Until then, nothing is loaded from YouTube or Google. When you press play, YouTube (Google) receives your IP address and may set cookies, under Google's privacy policy.
Data Retention
Your input (conditions, description, National Insurance Number if entered) is not retained on our application servers after the report is generated.
To keep the free answer to one per person and to spot repeat sign-ups, we keep coded forms (keyed hashes, which cannot be read back) of your email address, its domain and the activity you chose, of your internet connection's IP address, of the random code in your browser's free answer cookie and, if you list several conditions, of that list and of each condition in it (each coded on its own), with the time of your free answer and a count. Nothing else you entered is kept with them, and they are deleted automatically after 30 days at most.
Generated reports are sent only to your email address - we do not BCC, archive or otherwise keep a copy on our side.
Your own browser keeps a copy of your report on your device for 36 hours, so you can reopen it if you close the page. For a paid report it also keeps a short summary (the activities, the descriptors suggested and your key answers) for 90 days, so the answers you prepare with our other tools on the same device can match it. Consultation Prep keeps what you type into its form, your free practice card for 24 hours and your full prep for 7 days on your device in the same way, so you can come back to them. These copies stay on your device and are not sent to us. You can remove them at any time by clearing this site's data in your browser.
Stripe retains payment records for 7 years for UK financial regulations. Vercel request logs are typically kept for 30 days and contain no report content. Support emails you send us remain in our Zoho mailbox until you ask us to delete them.
Email addresses you opt in to give us (via free preview or re-determination letter tool) are kept in our Zoho mail folders until you unsubscribe, or for a maximum of 24 months from your last interaction with our emails - whichever comes first.
Your Rights Under UK GDPR
You have the right to:
- Access your personal data (Subject Access Request)
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Port your data to another service
- Object to processing
- Withdraw consent at any time
To exercise any of these rights, email support@adpexpert.co.uk. We will respond within one month.
Complaints
If you believe we have mishandled your data, you can complain to the Information Commissioner's Office (ICO):
Changes to This Policy
We may update this policy as the service evolves or as regulations change. Significant changes will be communicated by email to active users and announced on the homepage.