Privacy policy

Last updated 14 July 2026.

This policy explains what personal data getlastcopy.com collects, why, and what you can do about it. getlastcopy.com is the data controller for the data described here. It is operated from the United Kingdom by the sole trader who runs it, whose full details are available on request. For any question about this policy, email adam@getlastcopy.com.

What we collect

We keep the collection deliberately small. We collect the following.

• The email address you sign up with, which is also your username.
• A hashed version of your password. We never store the password itself.
• Your notification preferences, such as whether daily reminders are on.
• The backups you set up, meaning the name, schedule and recovery time objective you enter.
• The numbers your backup job sends on each check-in, such as size in bytes, file count and duration. These are figures you choose to send, never the contents of a backup.
• Technical metadata for each check-in, meaning the time it arrived and the IP address it came from.
• Alerts, the notes you add to them, and your restore drill records, including the name you record for whoever ran a drill.

What we never see

getlastcopy.com never has access to your backups or their contents. Your job sends a short line of numbers over a single curl request, so your backup data never leaves your systems and there is no agent installed anywhere. We run no analytics, set no advertising cookies, and load no third-party scripts.

Why we use it, and the legal basis

We only process your data to run the service, and each use rests on a lawful basis under UK GDPR.

• Performance of our contract with you, to run the monitoring you signed up for and to keep your evidence register.
• Our legitimate interest in keeping the service secure, which is why we log the IP address of each check-in and each login attempt, so we can apply rate limits and prevent abuse.
• Your consent, where you opt in to daily reminder emails, which you can switch off at any time in your settings.

Who processes it for us

A few providers process data on our behalf, and each is bound to protect it.

• Hetzner hosts the service and stores the database on a server in Germany.
• Resend sends our transactional email, such as verification and alert messages, from within the European Union.
• Cloudflare provides our DNS and forwards inbound email sent to our address.

We do not sell your data and we do not share it for advertising. We would disclose data only where the law required it.

Where your data is held

Your data is stored in Germany and processed within the United Kingdom and the European Union. Transactional email is handled in Ireland. We do not transfer your data outside the UK and the EU.

Cookies

getlastcopy.com uses two cookies and both are strictly necessary. A session cookie keeps you logged in and a second cookie protects forms against cross-site request forgery. There are no analytics or advertising cookies, so there is no consent banner to click.

How long we keep it

We keep your account data for as long as your account is open. You can export any backup's full history as CSV at any time from its page. Deleting a backup removes its entire history straight away, and deleting your account, which you can request by email, removes all of your data. If getlastcopy.com ever closes, you get months of notice and your evidence register stays exportable until the last day.

Your rights

Under UK data protection law you can ask for a copy of your data, correct it, have it deleted, restrict or object to how we use it, and receive it in a portable form. Email adam@getlastcopy.com and we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Security

We serve the whole site over HTTPS, store passwords only as salted hashes, and keep the database on a firewalled server reachable only over an encrypted connection. Your ping URLs are treated as secrets and can be rotated in one click from a backup's page if one ever leaks.

Changes to this policy

We may update this policy as the service changes. If we make a material change we will note it here and update the date at the top. Where a change affects you directly we will email account holders.