Founders, Here’s What Companies House Reveals About Your Home Address – And How to Fix It

The more visible a startup becomes, the larger that digital footprint can get. For founders, privacy is therefore worth considering before the next big announcement, not after a problem appears.

The Data Trail a Funding Announcement Creates

A funding announcement can create a surprisingly long trail. A press release may include the founder’s name, company, role and location, while interviews and articles add more details over time. Once published, this information can remain searchable long after the original announcement has disappeared from social feeds.

Investor and business databases add another layer. Profiles on sites such as Crunchbase can connect a founder to their company, previous ventures and industry. LinkedIn does much the same thing, especially when a funding round leads to new connections, media requests and profile activity.

None of this is necessarily a problem. Public visibility is part of building a company. The issue is that the same information that makes a founder easier to find professionally can also make them easier to identify personally.

Companies House and the Registered Address Problem

For UK founders, Companies House deserves particular attention. Directors must provide a service address and their usual residential address. The home address is kept privately, while the service address appears on the public register. A director’s name, nationality and month and year of birth are also publicly available.  

The important distinction is the address used publicly. If a founder uses their home as the company’s registered office or service address, that address can appear on the public record. Companies House specifically advises people who do not want their home address displayed to use another appropriate address instead.

That decision is worth making early. Companies House records can remain available for the lifetime of a company, and changing an address later does not simply erase every historical record.

The situation differs across Europe. For example, Germany’s Handelsregister requires certain personal details, including the date of birth of people being registered, while the Dutch KVK register can contain information about directors and other officials, including personal details subject to applicable privacy restrictions. 

What People-Search Sites Do With Founder Data

Public company information is only one part of the picture. People-search and data-broker services can combine information from multiple sources to create profiles that are far more detailed than any single record.

A founder might appear in a company filing, a newspaper article, a professional directory and several social media profiles. That creates a security concern as well as a privacy concern. Someone researching a founder does not necessarily need access to confidential company systems if enough personal information is already available publicly.

A detailed profile can help an attacker make a phishing message look convincing, impersonate someone the founder knows or work out which people inside the company are worth targeting.

GDPR Rights and What They Actually Cover

European founders have important data-protection rights, but the right to erasure is not a magic delete button.

Under Article 17 of the UK GDPR, individuals can ask organisations to erase personal information in certain circumstances. The right is not absolute, and there are exceptions, including legal obligations and freedom of expression. 

In the EU, the European Data Protection Board similarly explains that organisations generally have one month to respond to an erasure request, although the period can be extended by another two months when a request is particularly complex.

This does not mean every public record can simply be removed. Information that an organisation is legally required to keep may remain available, and public company registers have their own rules.

For UK founders dealing with a data-protection issue, the ICO provides a formal route for raising concerns when an organisation has not handled a valid request properly. 

The Operational Security Case for Founder Privacy

Founder privacy is easy to treat as a personal preference. In practice, it can become part of a company's security, and cybersecurity is increasingly non-negotiable for European startups as a whole, not just at the founder level.

A scammer who knows a founder’s name, role, company, suppliers and recent fundraising activity has more material to work with than someone starting from scratch. A convincing email asking an employee to make a payment or share a document can be built from information that was never intended to be secret.

There is also the personal side. As a startup becomes better known, having a home address or private contact details readily discoverable can create unnecessary risks for the founder and their household.

The goal is not to disappear from the internet. It is to decide which information needs to be public and which information does not.

What Founders Should Do Before the Next Announcement

A few simple checks can make a meaningful difference before a funding round or major press announcement.

• Search the founder’s name, company name and old business names online.
• Check the Companies House record and make sure a home address is not being used publicly.
• Use a separate email address for press and investor enquiries.
• Review LinkedIn and other public profiles for unnecessary personal details.
• Check people-search and data-broker sites for existing profiles.
• Remove information where there is a valid legal or platform-based removal route.
• Repeat the audit periodically rather than treating privacy as a one-time task.

Going public is part of building a startup. There is no need to hide the founder behind the company. But as visibility grows, knowing exactly what is public, and what has quietly become public along the way, should be part of the job too.