Superscript privacy & data

This notice applies where we act as a controller, deciding why and how personal data is used.

names, contact details, roles and business information

your IP address, device and browser information, approximate location derived from technical information

pages viewed, searches, clicks and other interactions with our websites

Health, injury and disability information is “special category” data.

We record telephone calls to keep a record of customer instructions and Account Data

Sending marketing, understanding relevant customer interests and managing preferences.

Detecting and preventing fraud; maintaining the security of our services; investigating suspected misuse.

Personalised online advertising, re-targeting, advertising audience matching and associated advertising profiling.

We normally retain these records for seven years after confirmed account closure event.

We retain personal data relating to an incomplete application for a maximum of two years from confirmed retention starting point.

Our services and suppliers may involve storage, access or processing outside the UK or EEA, including in the United States.

For UK transfers, we use an applicable UK adequacy arrangement or appropriate safeguards

such as the EU Standard Contractual Clauses.

At the end of the relevant retention period, information is deleted or anonymised so that it no longer identifies an individual.

Provide access to your personal data and information about how it is used.

Erase information where there is no continuing lawful reason to keep it.

You may object to direct marketing, including related profiling, at any time without giving a reason.