Privacy policy

Definitions

Personal data identifies or can reasonably be linked to a person. Processing includes collecting, using, sharing, retaining and deleting that information.

Information we collect

We collect name, surname, telephone number, email address and the content of a request. Account use can also produce device, approximate location, login, settings, audit and support records. Verification may involve identity and address evidence.

Usage data and cookies

Essential cookies maintain security and session state. Limited usage records help diagnose faults and protect the service. Non-essential analytics or advertising cookies require an appropriate choice where used.

Purposes

We use data to answer enquiries, arrange account calls, provide services, verify identity, secure accounts, process support matters, comply with law and improve reliability. Marketing is kept separate from service communication.

Legal bases

Processing may be necessary to take steps at your request or perform a contract, meet a legal duty, or pursue legitimate interests in security and service improvement. Consent is used for optional marketing where required and can be withdrawn.

Retention

Unconverted enquiries are normally retained for up to 24 months. Account and transaction-related records may be kept for six years after the relationship ends where legal or dispute needs apply. Security logs are retained according to risk and operational necessity.

Sharing

Data may be shared with regulated service providers, identity-check suppliers, hosting and communications providers, professional advisers, affiliates supporting the service and competent authorities. Each recipient is limited by purpose, contract or law.

International transfers

If information is processed outside the UK, we use a lawful transfer mechanism and assess relevant safeguards. Location alone does not replace the need for security and access controls.

Security

Controls include encryption, role-based access, multi-factor authentication, monitoring and incident procedures. No system is completely secure; suspected incidents are assessed and notified where law requires.

Your rights

You may request access, correction, deletion, restriction, portability or objection, subject to legal limits. You may withdraw consent and complain to the Information Commissioner's Office. We may verify identity before responding.

Service providers and links

External providers have their own responsibilities and privacy notices. A link to another site does not make us responsible for its content or handling of data.

Children

The service is not directed to children and account registration is limited to adults. We delete information collected from a child where identified and no lawful reason requires retention.

Changes and contact

Updates take effect when published, with additional notice where appropriate. Send privacy questions or rights requests to [email protected].