Website and business-enquiry privacy notice.

Who we are

COMPLIANT PARAPLANNING SERVICES LTD (company number SC885584) is the controller for personal data used to operate this website, respond to business enquiries and administer its own business. The current registered-office details are available through Companies House. You can contact us through the website business-enquiry form.

What this notice covers

This notice covers visitors, adviser-firm contacts, suppliers and other business contacts. It does not govern end-client case data processed for an adviser firm; that processing will be covered by the relevant engagement agreement, data-processing terms and client-facing transparency information.

Information we collect

• Business contact details, including name, role, firm, work email and telephone number.
• Firm information such as an FCA reference number, network or compliance provider and expected service volume.
• The content of a firm-level enquiry and records of our response.
• Technical and security data generated by the website and hosting service, such as IP address, timestamps, device/browser details and request logs.

Why we use it

• Steps before a contract: to assess an application, scope a service and prepare a quote or agreement.
• Legitimate interests: to respond to B2B enquiries, protect the website, prevent misuse, manage professional relationships and improve our service.
• Legal obligation: for tax, accounting, company-law, regulatory or lawful authority requirements.
• Contract: to administer an agreement with a firm or supplier.

We do not use website enquiry data for automated decision-making that produces legal or similarly significant effects.

Who receives it

Information may be handled by service providers supporting website hosting, security, email, professional advice and business administration. They receive only what is needed for their role and are subject to appropriate contractual and security requirements. We may also disclose information where required by law, to protect legal rights or in connection with a genuine corporate transaction.

International transfers

Some suppliers may process data outside the UK. Where this occurs, we will use an applicable UK adequacy regulation or contractual safeguard and consider any additional measures required.

Retention

Unsuccessful or inactive website enquiries are normally deleted or anonymised after 12 months. Contract, accounting and legal records are retained for the relevant statutory or limitation period. Security logs are retained according to the hosting and security configuration. A record may be held longer where reasonably needed for a dispute, legal hold or investigation.

Your rights

Depending on the circumstances, you may have rights of access, correction, erasure, restriction, objection and data portability, and a right to complain to the Information Commissioner’s Office. Visit ico.org.uk for complaint guidance. We will verify identity before acting on a rights request.

Changes

We may update this notice when the service, suppliers or legal position changes. The date at the top identifies the current version.