Privacy Policy
How we collect, use, and protect your personal information.
Last updated: 1 January 2026
1. Introduction
2. Data Controller
3. Personal Data We Collect
Identity Data
Full name, date of birth, nationality, former names, and identity document details as required for company formation filings with Companies House.
Contact Data
Email address, telephone number, residential address, and correspondence address.
Financial Data
Payment card details (processed securely via Stripe), billing address, and transaction history.
Company Data
Proposed company name, registered office address, SIC codes, share structure, director and shareholder information, and persons with significant control (PSC) details.
Technical Data
IP address, browser type and version, operating system, device information, time zone setting, and browsing actions on our website.
Usage Data
Information about how you use our website and services, including pages visited, features used, and interaction patterns.
Communications Data
Records and content of correspondence with us, including emails, live chat transcripts, and support tickets.
4. How We Collect Your Data
- Direct interactions — when you create an account, place an order, complete our company formation forms, subscribe to our newsletter, or contact us.
- Automated technologies — as you navigate our website, we automatically collect technical and usage data through cookies, server logs, and similar technologies.
- Third-party sources — we may receive data from analytics providers (such as Google Analytics), payment processors (Stripe), identity verification services, and Companies House public records.
- Social login — if you choose to sign in via Google, Microsoft, or Apple, we receive profile information as authorised by you.
5. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| To register your account and manage your relationship with us | Performance of a contract |
| To process and submit company formation applications to Companies House | Performance of a contract |
| To process payments and manage billing | Performance of a contract |
| To verify your identity for Anti-Money Laundering (AML) compliance | Legal obligation |
| To communicate with you about your orders, applications, and account | Performance of a contract |
| To send you marketing communications (where you have opted in) | Consent |
| To improve our website, services, and user experience | Legitimate interest |
| To detect, prevent, and address fraud or technical issues | Legitimate interest |
| To comply with legal and regulatory obligations | Legal obligation |
6. Who We Share Your Data With
Companies House
To file incorporation documents, annual returns, and other statutory filings as required by law. Information filed with Companies House becomes part of the public register.
HM Revenue & Customs (HMRC)
For VAT registration, Corporation Tax registration, and other tax-related filings.
Payment Processors
Stripe processes your payment information securely. We do not store your full card details on our servers.
Identity Verification Providers
To conduct AML and Know Your Customer (KYC) checks as required by the Money Laundering Regulations 2017.
Cloud Service Providers
Our website and services are hosted on secure cloud infrastructure. All providers are contractually bound to protect your data.
Professional Advisers
Including accountants, lawyers, and auditors who provide consultancy, banking, legal, insurance, and accounting services.
7. Data Retention
- Account and transaction data: 7 years after your last transaction (to comply with tax and accounting regulations).
- Company formation records: 7 years after the company is dissolved or the service relationship ends.
- AML/KYC verification records: 5 years after the end of the business relationship (as required by the Money Laundering Regulations 2017).
- Marketing consent records: Until you withdraw consent or unsubscribe.
- Technical and analytics data: 26 months from the date of collection.
8. Data Security
9. Your Rights
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can ask us to correct any inaccurate or incomplete personal data.
Right to Erasure
You can ask us to delete your personal data in certain circumstances. Note that we may need to retain some data to comply with legal obligations.
Right to Restrict Processing
You can ask us to limit how we use your personal data.
Right to Data Portability
You can request your personal data in a structured, commonly used, machine-readable format.
Right to Object
You can object to the processing of your personal data for direct marketing or where we rely on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.