Privacy Policy

Hello, welcome to the Slip Privacy Policy. At Slip, we are committed to keeping your personal information safe and secure, and handling it in accordance with our legal obligations. This Privacy Policy applies to both retailers that use Slip to issue digital receipts (including their employees and representatives) (“Clients”) and to individual customers who receive, view or store digital receipts via Slip (whether or not they have created an account) (“Customers”). This Privacy Policy sets out in detail the purposes for which we process your personal information, what rights you have in relation to that information, who we share it with and everything else we think is important for you to be aware of.

Please make sure you check it carefully and if you don’t agree with it, then (although we hate to turn you away) you shouldn’t use our Platform or services. This is because by accessing our Platform or services, you confirm that you accept the way in which we process your personal information. This privacy policy forms part of our Terms, and capitalised words and phrases in it have the same meaning as those in our Terms.

If you have any concerns, please feel free to contact us.

About Slip

We are Slip Technology Limited, a company incorporated and registered in England and Wales with company number 13370492. Our registered office is at 120 New Cavendish Street, London W1W 6XX (referred to as Slip, we, our and us). We are the data controller for the purposes of the personal information processed in accordance with this Privacy Policy (broadly, for personal data relating to platform/service operation, analytics, security, and customer support). We are registered with the Information Commissioner’s Office (ICO) under registration number ZB562846.

Clients are typically the data controllers of Customer receipt data. Slip processes this data on their behalf as a data processor, in accordance with retailer instructions and a data processing agreement. This will include when you have signed up with one of our partners to receive a Digital Receipt but have chosen not to create a Slip account, or use our platform. In these circumstances, the data controller will be the company that you have received your Digital Receipt from and we would recommend that you review their privacy policy for information as to how they process your personal data.

We are committed to protecting your personal data and complying with all applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and (where applicable) the EU GDPR, together the “Data Protection Legislation”. We have appointed a data privacy manager, Edward Hermann, who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, you can contact us regarding this Privacy Policy by web form here.

Contents of this Privacy Policy:

1. About this Privacy Policy
2. The personal information we collect, how we collect it, and why (and our legal basis for collecting and using your personal information)
3. Gift Receipts
4. Marketing and general communications
5. When do we share your personal information?
6. How long do we store your personal information?
7. International transfers of your personal information
8. Security of your personal information
9. Links
10. Age restrictions
11. Your rights and choices
12. Contacting us
13. Cookies

1. About this Privacy Policy

In this Privacy Policy we’ll refer to our Website, which refers to all our sites located at or accessible through www.slipreceipts.com, our Web Application, and our Client Dashboard, together as our Platform. This Privacy Policy applies to the personal information we collect about you through our Platform, by telephone, by post, through our social media platforms, from third parties and when you otherwise communicate with us.

We regularly review our Privacy Policy to ensure it is up to date, however it may change from time to time. An up-to-date version will always be available on our Website. This Privacy Policy was last updated on 17 December 2025.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.

2. The personal information we collect, how we collect it, and why

Personal information means any information about an individual from which that individual can be identified. The followings hows information we process about you, and the purpose for which we process that information. There may be more than one reason for which we collect such information. If you would like further information, please contact us.

Legal basis for collecting and using your personal information

We only ever use your information in line with the Data Protection Legislation. In short, this means we only use it where we have a legal basis to do so. Under the Data Protection Legislation, these are the general legal bases for which we process your personal information, as detailed in the rest of this section.

• Performance of our contract  – processing your personal information is necessary for a contract you have with us, or because we have asked you to take specific steps before entering into that contract.
• Legitimate interests  – processing your personal information is necessary for our legitimate interests or those of a third party, provided those interests are not outweighed by your rights and interests (including where processing is     required to comply with or enforce a legal obligation, or to exercise or defend our legal rights).
• Legal obligation - processing your personal information is necessary to comply with a legal or regulatory obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis. Where     we rely on legal obligation and you do not provide the necessary information, we may be unable to fulfil a right you have or comply with     our obligations to you, or we may need to take additional steps, such as informing law enforcement or a public authority or applying for a court order.
• Consent – you have given us consent (i.e. your active agreement) to process your personal information for a     specific purpose that we have told you about.

How and why: personal information that you provide to us.

Collected directly from Customers: 

• Type of Information: Customer account set up information, including your name, email address, address, telephone number, gender, date of birth, personal preferences, and any other requested information which Customers provide.

Reasons for Using: Your account information enables us to personally and uniquely identify and communicate with you, both within the Platform, and externally in emails, SMS messages and other forms of communication (including issuing and delivering digital receipts). It also makes you visible and identifiable to us and by Clients. We also require this information for account eligibility purposes and account maintenance purposes.

• Type of Information: Customer account set up information, including your name, email address, telephone number, personal preferences, and any other requested information whichCustomers provide.

Reasons for Using: To send you relevant marketing communications and make personalised suggestions and recommendations to you about goods or services that may be of interest to you based on the information you have provided to us.

Legal Basis: Necessary for our legitimate interests (to carry out direct marketing, develop our products/services, inform our marketing strategy, and grow our business).

Collected directly from Clients: 

• ‍Type of Information: Client account and profile setup information, including business name, address, Client ID, contact information and other account details which you provide to us.

Reasons for Using: This information enables us to set you up as a Client on ourPlatform and communicate with you as envisaged by our Terms. We also require this information for billing, account eligibility purposes and account maintenance purposes.

Legal Basis: (a) To perform our contract with you, (b) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you, and/or to recover debts due to us), and (c) Necessary to comply with a legal obligation.

• ‍Type of Information: Client account and profile setup information, including business name, address, Client ID, contact information and other account details which you provide to us.

Reasons for Using: To send you relevant marketing communications and make personalised suggestions and recommendations to you about goods or services that may be of interest to you based on the information you have provided to us.

Legal Basis: Necessary for our legitimate interests (to carry out direct marketing, develop our products/services and grow our business). Or consent, having obtained your prior consent to receiving direct marketing where this is legally required.

• ‍Type of Information: Client review and feedback information including your interests, preferences, feedback and survey responses.

Reasons for Using: We enable our Customers to browse Clients (including their Promotional Offers), and we may provide different forms of feedback based on their experiences with them.

Legal Basis:(a) To perform our contract with you, (b) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you),and (c) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business).

• ‍Type of Information: Information provided duringClient Checks including ID documents.

Reasons for Using: We may check our Clients to ensure they are suitable for ourPlatform. We may use third party providers to carry out Checks, who may in turn provide us with any documents (such as ID documents) which you provide to them.

Legal Basis:(a) To perform our contract with you, (b) Necessary for our legitimate interests (for running our business, and to prevent fraud), and (c) Necessary to comply with a legal obligation.

• ‍Type of Information: Your preferences for receiving communications and notifications.

Reasons for Using: We store your preferences, so we know exactly how to communicate with you (e.g. for marketing or sending service communications), and in some cases, how not to communicate with you.

Legal Basis:(a) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you), and (c) Necessary to comply with a legal obligation.

Personal information we collect automatically:

• ‍Type of Information: Account status

Reasons for Using: We store information about your account with us and interactions with our service, including where Customers have an unregistered account, or a full Customer Account.

Legal Basis:(a) To perform our contract with you, and (b) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you, to study how customers use our products/services, to develop them, to grow our business, and to inform our marketing strategy).

• ‍Type of Information: User number (Clients and Customers are collectively referenced in these Terms as “Users”) 

Reasons for Using: When a User signs up, we generate this as a mechanism to identify them across our technical systems, and to link that Customer with their product preferences, billing records, service interaction analytics and customer service history. 

Legal Basis:(a) To perform our contract with you, and (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy).

• ‍Type of Information: Your interactions with our service, product/services Customers purchase from Clients, date of purchase, and transaction metadata (e.g. number of receipts issued)

Reasons for Using: When you interact with our Platform, for example when a Customer gets a Digital Receipt, or when a Client publishes a Promotional Offer, we record and track this information for our ongoing operations and to analyse how our Users enjoy our service so that we can continue to develop it and to send digital receipts.

Legal Basis:(a) To perform our contract with you, and (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business, to inform our marketing strategy, to define types of customers for our products and services, and to keep our website updated and relevant).

• ‍Type of Information: Payment information (e.g.records of transactions)

Reasons for Using: Once applicable, we will record payment and transaction data to keep financial and security records for our business and to comply with our legal obligations to retain financial and transaction information.

Legal Basis:(a) Necessary for our legitimate interests (to recover debts due to us), and(c) Necessary to comply with a legal obligation.

• ‍Type of Information: Technical data including internet protocol (IP)address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access our website

‍Reasons for Using: As you interact with our Platform, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. This enables us to uniquely identify you and to distinguish you from other Users. In turn, it enables us to deliver you a more personalised service (e.g. more personalised Platform content).‍

Legal Basis: Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to define types of customers for our products and services, and to keep our website updated and relevant). Or having obtained your prior consent (for non-essential cookies).

• ‍Type of Information: Your interactions with our service using personal information collected by using cookies and other similar technologies as you interact with our website and make purchases – please see section 11 below for further details.

Reasons for Using: To send you relevant marketing communications and make personalised suggestions and recommendations to you about goods or services that may be of interest to you based on your usage and preferences.

Legal Basis: Necessary for our legitimate interests (to carry out direct marketing, develop our products/services and grow our business).‍

Personal information we collect from other sources:

• ‍Type of Information: Social media information

As part of the sign-up process, we may import some of the information you have disclosed to your social media pages, such as Facebook or Google (if you choose to connect to Slip via a social network). Equally, certain parts of our service enable you to share our content or information by email, text (SMS) message or other social applications.

Reasons for Using: In respect of all the above information, our overarching purpose is to enable us to generate a trusted, secure portal for making receipts paperless. We want all of our Users’ information to be secure, but also visible to us so that we can provide them personalised customer service and a customised User experience.

Legal Basis:Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to help us improve and develop our products and services, and to provide you with a personalised service).

Aggregated Data

We may also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate the data collected to show an individuals' usage to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

We do not collect or process any personal information from you that is considered"Sensitive Personal Information" under the GDPR, such as personal information relating to your sexual orientation or ethnic origin unless we have obtained your explicit consent, or if it is being collected subject to and in accordance with the GDPR.

3. Gift Receipts

Where a Customer chooses to send a digital gift receipt to another person (the “Recipient”), we process limited personal data provided by the sender, such as the Recipient’s name and contact details, solely for the purpose of delivering the gift receipt on the sender’s behalf. We act on behalf of the retailer as their data processor and we do not use the Recipient’s personal data for marketing, profiling, analytics or any other secondary purposes.

To help retailers understand when Recipients later choose to engage with them, we create a random, non-identifying ‘gift token’. This token cannot identify Recipients and cannot be linked back to a Recipient’s personal data. If a Recipient later voluntarily chooses to sign up, join a loyalty programme, or otherwise interact with the retailer, we will send the retailer a ‘gift received’ event referencing the gift token together with any information the Recipient provides at that time. At that point, the retailer becomes the controller of the Recipient’s data.

We do not share the Recipient’s personal data with the relevant retailer unless and until the Recipient actively engages with the gift receipt and provides their consent. If the Recipient later chooses to engage with the gift receipt and provide their details, we process that data in accordance with the Retailer’s instructions and Data ProtectionLegislation. Any such engagement is governed by the Retailer’s privacy policy and we encourage you to read that.

4. Marketing and General Communications

Section 1 has detailed how and why we collect your personal information, including where we use your personal information to send you marketing and other such communication. This section 2 is to explain how we will ensure that you only receive communications that you wish to receive.

Marketing communications:

We want to ensure that you are informed and aware of the best services and promotions that we can offer you. 

When you sign up to an account with us, you will be able to indicate your preferences for receiving direct marketing communications from us. We will get your express consent before we share your personal data with any third party for their own direct marketing purposes.

If you have not opted out of receiving the marketing, we will send you marketing communications about products or services that we believe you may be interested in if you have requested information from us or if you have purchased goods or services from us, or have purchased goods or services from one of our Clients and have signed up to receive digital receipts through Slip.

We will always process your personal information in accordance with this Privacy Policy.

You can change your marketing preferences and unsubscribe at anytime by accessing the settings within our Platform, by unsubscribing in emails and messages, or by emailing us. If you choose not to receive this information, we will be unable to keep you informed of new services and promotions of ours, or the Slip group of companies, that may interest you.

Whatever you choose, if you opt out of receiving marketing communications, you’ll still receive other important information, for example service-related updates and communications that are essential for administrative or customer service purposes for example relating to service availability notifications, updates to our terms and conditions, and checking that your contact details are correct.

Service communications:

As detailed in section 1, we may send you communications such as those which relate to any service updates (e.g. new product features, service availability) or provide customer satisfaction surveys. In particular, if you have requested to receive digital receipts, these may be sent to you via SMS, email or another messaging service.

5. When do we share your persona information?:

We may share your personal information for a certain purposes and to third parties, as described below, where it is necessary for the purposes set out in section 2 above:

• Slip staff: We share your information with our staff (including employees, consultants, agents and advisors) as required for: providing you with access to our services according to our agreement, data storage and processing, providing customer support, making internal choices around business improvements, consent development, and for other purposes set out in this Privacy Policy.
• Clients: Where a Customer has previously opted in to share their personal information with a particular Client, directly with that Client, then the Customer’s Transaction data generated on Slip may, in accordance with the agreed terms between the Client and the Customer, then be shared with the Client by Slip. See also section 3 above explaining when and how we may share information with Clients in the context of gift receipts. This is always subject to the Customer granting their consent to the Client for this information to be shared.
• Third Party Providers: We use certain companies, agents or contractors (Third Party Providers) to perform services on our behalf or to help deliver our services to you. In particular, we contract with Third Party Providers, for example to provide advertising, marketing, communications, identity checking, infrastructure and IT services, to personalise and enhance our services, to provide customer service, to collect debts, to analyse and action data (including data about our Users’ interactions with our Platform), and to process and administer consumer surveys. In the course of providing such services, these Third-Party Providers may have access to your personal information. We do not authorise them to use or disclose your personal information except in connection with providing their services to us.
• Promotions with out partners: We may offer joint promotions, schemes or incentives with our selected partners (including Clients where applicable) that, in order for you to participate in, will require us to share your information with the relevant partner. In fulfilling these types of promotions, we may share your name and other information in connection with fulfilling the relevant incentive. Please note that our partners are responsible for their own privacy and data protection methods and, if applicable, you should refer to their relevant privacy policy
• To protect legitimate interests: There are certain circumstances where Slip and our Third Party Providers may disclose and/or make use of your information where a disclosure would be necessary to:(a) satisfy any applicable law, regulation, legal process, court order, or other legal or governmental request or requirement, (b) enforce applicable terms of use, including investigation of any actual or alleged breaches, (c) detect, prevent, or otherwise address illegal or suspected illegal activities(including payment fraud), security or technical issues, or (d) protect against harm to the rights, property or safety of Slip, its Users or the public, as required or permitted by law.
• Transfers of our business: In connection with any corporate reorganisation, restructuring, investment, merger or sale, or other transfer of assets, we will transfer information, including personal information, provided that the receiving party agrees to comply with our requirements as set out in this Privacy Policy relating to your personal information. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Policy.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes (without your consent) and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. How long do we store your personal information?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Unless a longer retention period is required or permitted by law, we will only hold your personal information on our systems for the period necessary to fulfil the purposes outlined in thisPrivacy Policy or until you request that we delete your personal information.Even if we delete your personal information, we may need to retain a copy on backup or archival media for legal, tax or regulatory purposes.

We are legally permitted or required to maintain certain personal information, and otherwise operate the following retention periods:

• We are legally required to retain financial and transaction data for a minimum period of 7 years for tax, audit and accounting purposes. This includes keeping a record of the amount of each transaction, what it related to, and who we transacted with.
• We will will retain Digital Receipt records within a User’s account at least so long as the User is active, and their account has not been deleted. If you do not use your account for a prolonged period (e.g. 3 years), we may delete or anonymise your data, unless we are required to retain it longer for legal reasons.
• For gift receipts, we delete all identifiable personal data about the Recipient (including name, phone number and message content) immediately following successful delivery of the gift receipt and generate and retain only a non-identifying, pseudonymous, randomised internal reference associated with the gift receipt to enable attribution if a Recipient later interacts with the retailer (e.g. signs up or activates an account). This reference does not identify the Recipient and does not constitute personal data.
• If there is an unresolved issue relating to a Customer Account, for example relating to an issue with Digital Receipts or an unresolved dispute, then we will retain your personal information until the issue is resolved.
• There maybe other situations where we have legitimate business interests to retain personal information, such as to prevent fraud or protect security of our other Users.

Any Third-Party Providers that we engage will keep your personal information stored on their systems for as long as is necessary to provide the relevant services to you or us. 

If we end our relationship with any third-party providers, we will take reasonable steps to ensure that they securely delete or return your personal information to us.

We may retain personal information about you for statistical purposes. Where information is retained for statistical purposes, it will always be anonymised, meaning that you will not be identifiable from that information, in which case we may use this information indefinitely without further notice to you.

7. International transfers of your personal information

All of our servers are based in the United Kingdom (UK) and the personal data that we collect is currently processed and used in the UK, and the European Economic Area (EEA), except that some of the external third parties to whom we transfer your personal data are based outside the UK and EEA so their processing of your personal data will involve a transfer of data outside theUK/EEA.

As such, the information that we collect from you may be transferred to, and stored at, a destination outside of the country that you are based in. 

When we transfer and store your personal information outside of the UK or EEA, we will take steps to ensure that the information is transferred in accordance with this Privacy Policy and applicable data protection laws. 

Whenever we transfer your personal data out of the UK to countries which have laws that do not provide the same level of data protection as the UK law, we always ensure that a similar degree of protection is afforded to it by ensuring that at least one of the following safeguards are implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries;
• Where we use certain service providers, we may use StandardContractual Clauses approved by the EU Commission, the International DataTransfer Agreements approved by the Information Commissioners Office, or theInternational Data Transfer Addendum to the European Commission’s standard contractual clauses for international data transfers which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries;
• Where we use providers based in the US, we will make an assessment to determine whether we can transfer your personal data on the basis of SCCs taking into account the circumstances of the transfer, and put supplementary measures in place if required. The supplementary measures along with SCCs follow a case-by-case analysis of the circumstances surrounding the transfer and this would ensure that U.S. law does not encroach on the satisfactory level of protection guarantee. If we come to the decision, taking into account the circumstances of the transfer and possible supplementary measures, that appropriate safeguards would not be ensured, then we will either suspend the transfer of your personal data until we ensure an adequate level of protection can be provided or we might end the transfer of your personal data. 

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

8. Security of your personal information

We are committed to securing and protecting your personal information, and we make sure to implement appropriate technical and organisational measures to help protect the security of your personal information and to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We may adopt various measures and policies including anonymisation, pseudonymisation, encryption, password restricted access, staff training and retention policies to guard against unauthorised access and unnecessary retention of personal information in our systems.

In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Links

Our Platform may, from time to time, contain links to websites, plug-ins and applications operated by third parties, which will usually be those of Clients or our commercial partners. 

This Privacy Policy only applies to the personal information that we collect from you, and we cannot be responsible for personal information collected and stored by third parties. 

If you click on a link or enable plug-ins, please understand that those connections may allow third parties to collect or share data about you, and that those third-party websites will have their own terms and conditions and privacy policies.

We do not control or accept any responsibility for the content of those third-party websites or third-party terms and conditions or policies. 

Please check these policies, when you leave our website and before you submit any personal information to them.

10. Age resctrictions

You must be 16 years of age or older to use thePlatform. We do not knowingly collect personal information from individuals under 16 years of age. 

If you are under that age limit, then please do not use Slip or provide any personal information to us.

If you are under 18 years of age, then you will be required to have consent of your parent or guardian to access thePlatform and we will only process the basic information which we require from you for so that you can use our Platform.

If you are a parent or legal guardian of a child under the applicable age limit or accessing the Platform without consent, and you become aware that your child has provided his/her personal information to us, please contact us. If we learn that we have collected personal information of an individual under the age of 16, then we will take all reasonable steps to delete that information from our systems, and if required, delete the relevant User account.

11. Your rights and choices

This section explains that you have a number of rights in relation to your personal information.

Under the Data Protection Legislation, as aUser of our Platform, you are entitled to certain rights. There are circumstances in which your rights may not apply. You have the right to request that we:

• provide you with a copy of the information we hold about you and to check that we are lawfully processing it (commonly known as a "subject access request");
• update any of your personal information if it is inaccurate or out of date (though we may need to verify the accuracy of the new information that you provide to us);
• delete the personal information we hold about you in certain circumstances where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. If we are providing services to you and you ask us to delete personal information we hold about you then we may be unable to continue providing those services to you. We also may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you at that time of your request;
• restrict the way in which we process your personal information. This enables you to ask us to suspend the processing of your personal data including if you want us to establish your personal information’s accuracy, where our use of the data is unlawful but you do not want us to delete it, where you need us to hold onto data even though we no longer require it, or if you have objected to us using your data but we have overriding legitimate grounds to use it;
• stop processing your data if you object to us processing your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data, or if you have valid objections to such processing, including the absolute right to object any time to the processing of your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object;
• transfer your personal information to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you; and
• withdraw consent at any time where we are relying on consent to process your personal data (see section 2 for more details of when we rely on your consent). However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

For more information on your rights and how to use them, or if you would like to make any of the requests set out above, please contact us.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

You will not usually have to pay a fee to access your personal data (or to exercise any of the other rights). However, please note that we reserve the right to charge a fee for responding to requests where we reasonably determine that they are manifestly unfounded or onerous or being made in bad faith. Alternatively, we could refuse to comply with your request in these circumstances.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

12. Contacting us

If you have any questions or concerns about how we handle your personal information, please contact us here.

If you are not satisfied with the way a complaint you make in relation to your personal data is handled by us, you maybe able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner's Office (ICO). The ICO's contact details can be found on their website at https://ico.org.uk/.We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

13. Cookies

We may use cookies on our Platform which help us monitor use of the Platform, and in turn improve it based on how ourUsers interact with it. You can choose to accept or turn off cookies within your browser settings.

For more information about how we use cookies, please see our cookies policy: here