Magnum GSI Ltd (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use the GeoScreen platform at https://geoscreen.uk (the “Service”), in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). GeoScreen is an automated geotechnical desk study platform operated by Magnum GSI Ltd.
Magnum GSI Ltd is the data controller for personal data collected through this Service. Our registered details are:
For all data matters, please contact our data representative, Tristan Morgan, at Enquiries@magnumgsi.com.
When you use the Service, we collect the following categories of personal data:
We do not knowingly collect special categories of personal data (for example health, ethnicity, or biometric data), and the Service does not require it.
We process your personal data for the following purposes and on the following lawful bases under Article 6 of the UK GDPR:
| What we do | Why | Lawful basis |
|---|---|---|
| Generate and deliver your report | To perform the service you have requested and paid for | Performance of a contract |
| Process your payment | To take payment for the report | Performance of a contract |
| Send transactional emails | To fulfil and support your order | Performance of a contract |
| Keep records of transactions | To meet tax, accounting, and legal obligations | Legal obligation |
| Maintain security and prevent fraud | To protect the Service and our users | Legitimate interests |
| Improve and troubleshoot the Service | To operate and develop the platform | Legitimate interests |
Where we rely on legitimate interests, we have considered the impact on you and do not use your data in ways you would not reasonably expect.
GeoScreen produces reports by querying publicly available geotechnical and environmental datasets and using artificial intelligence to generate the report narrative. To do this, the site location and proposed use you enter are transmitted to the third-party data and AI providers listed in the following section.
This automated processing produces a report about a site, not an automated decision about you. We do not carry out automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22 of the UK GDPR. The report is an indicative, preliminary desk-based assessment and is not a substitute for professional ground investigation.
We use the following service providers (“processors”) to operate the Service. Each is bound by a data processing agreement and processes your data only on our instructions.
| Provider | Purpose | Processing location |
|---|---|---|
| Railway | Hosting and infrastructure (application, database, cache) | EU (Amsterdam) |
| Anthropic | AI generation of report narrative (processes site location and prompt text) | United States |
| Resend (Resend Inc.) | Email delivery | EU (Ireland) |
| Stripe | Payment processing | US, with safeguards (see Section 6) |
In addition, to perform the geotechnical assessment, the site location you enter is transmitted to third-party data providers — including Ordnance Survey, the British Geological Survey, the Environment Agency, the Mining Remediation Authority, Natural England, the UK Health Security Agency, Historic England, and MapTiler — so that the relevant site data can be retrieved. These are predominantly UK-based data sources.
We may also disclose personal data where required by law, to enforce our terms, or in connection with a sale or reorganisation of our business. We will treat your personal data as strictly confidential and will never sell it.
Our hosting (Railway) takes place in the EU, and our email delivery (Resend) takes place in the EU. The UK recognises the EU as providing an adequate level of data protection, so these transfers are permitted without additional safeguards.
Anthropic, which generates the report narrative, processes the site location and prompt text you submit, acting as our processor. This is governed by Anthropic’s Data Processing Addendum, with UK transfers covered by the ICO-approved UK Addendum to the EU Standard Contractual Clauses (SCCs). Information about Anthropic’s sub-processors is available at anthropic.com/subprocessors.
Payment processing through Stripe involves transfers to the United States, protected by appropriate safeguards which may include the UK Extension to the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
Each of our processors is bound by a written data processing agreement that requires them to protect your data and process it only on our instructions. You can request more information about these safeguards using the contact details in this policy.
We keep your personal data no longer than is reasonably necessary for the purposes for which it was collected:
| Data type | Retention period |
|---|---|
| Report content and order / site details | Retained for 12 months to allow re-delivery and support, after which it is deleted or anonymised. |
| Transaction and accounting records | Retained for 7 years to comply with tax and accounting regulations. |
| Correspondence | Retained for as long as needed to handle your query and maintain our records. |
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and the use of reputable infrastructure and payment providers. Magnum GSI Ltd holds Cyber Essentials certification covering the whole organisation. Our processors are also contractually required to maintain appropriate security measures. No system is completely secure, but we take reasonable steps to reduce risk.
Unless subject to an exemption under the UK GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, contact us at Enquiries@magnumgsi.com. We will respond within one month, and there is normally no charge.
We use cookies that are strictly necessary for the site to function. These do not require your consent under PECR. Where we use any analytics or non-essential cookies in future, we will request your consent and provide controls to manage them. You can also manage cookies through your browser settings. Our full Cookie Policy is available on the website.
The Service is intended for professional and business use and is not directed at children. We do not knowingly collect personal data from anyone under 18.
Any changes we make to this policy will be posted on this page. The effective date at the top of this policy shows when it was last updated. Where changes are material, we will notify you by email where we hold your contact details.
For any questions about this policy or your personal data, please contact:
Magnum GSI Ltd
Braeside, Eastgate, Bishop Auckland, County Durham, DL13 2HP
Email: Enquiries@magnumgsi.com