Privacy Notice | Sell Your Business Data

Who we are

[Registered company name] Ltd, a company registered in England and Wales with company number [00000000], with its registered office at [Registered office address], operates Sell Your Business Data (sellyourbusinessdata.com). We are the controller of the personal information described in this notice.

ICO registration reference: [ICO registration reference]. For privacy questions or to exercise your rights, write to [privacy contact email].

What we collect

When you submit an enquiry

Company details: company name, website, country, industry, approximate number of employees, how long you have operated.
High-level information about your records: whether written procedures or similar documentation exist, and the main language.
The outcome of our screening: which published buyer criteria your answers appear to meet, and a reference number.
Your contact details: name, job title and business email address.
Your confirmations: that you have authority to enquire, and that you consent to be introduced to a named buyer.
A record of which version of this notice you saw and when you submitted the form.
Which of our websites and pages you came from, and campaign parameters in the link, so we can see what is working.

When you contact us

The content of your message, your contact details and our reply.

When you use the site

Basic technical information such as your IP address and browser type is processed by our hosting and security providers to deliver the site and protect it from abuse. When you submit the form we store a one-way hash of your IP address, not the address itself, to limit spam and repeated submissions. We do not currently use analytics or advertising cookies. See our Cookie Policy.

Why we use it, and our lawful bases

Purposes of processing and the lawful basis for each
Purpose	Lawful basis (UK GDPR)	Notes
Reading your enquiry, assessing it against buyers' published criteria and replying to you	Legitimate interests	Our interest is running a free eligibility service and responding to people who ask. You would reasonably expect this.
Introducing you to a named buyer, including sharing your details with them	Consent	We ask you to agree before we do this, and tell you who the buyer is. You can withdraw consent at any time, but that will not affect sharing already done.
Keeping records of introductions and any referral fees we receive	Legal obligation and legitimate interests	Accounting, tax and the need to show who introduced whom.
Keeping the site secure and preventing spam and misuse	Legitimate interests	Protecting our service and users.
Sending you news or guides by email, if you ask for them	Consent	Optional and separate from your enquiry. You can unsubscribe at any time.
Responding to complaints and legal claims	Legitimate interests and legal obligation

We do not make decisions about you using solely automated means that have legal or similarly significant effects. Our screening compares your answers with buyers' published criteria and is advisory. A person reviews anything unclear. For more on how organisations must explain this, see the ICO's guidance on the right to be informed.

Named buyers, only with your consent. Before we introduce you to a buyer we will tell you who it is. We share only the details needed for the introduction, such as your name, job title, business email and company name, and tell the buyer what you have told us.
Service providers acting for us, such as hosting, database, email delivery and security providers. They process information only on our instructions.
Professional advisers, such as lawyers, accountants and insurers.
Authorities, where the law requires or allows it.

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not pass your details to any organisation other than the buyer you have agreed to be introduced to, except as set out above.

Some buyers handle leads and marketing differently from us. Once you apply to a buyer through its own link, that buyer is responsible for how it uses your information and its own privacy notice applies. For how organisations should handle information collected to generate leads, see the ICO's guidance.

Transfers outside the UK

Some buyers are based outside the UK, including in the United States. We will tell you where a buyer is based when we ask for your consent to introduce you. Where personal information is sent to a recipient outside the UK, we rely on an appropriate transfer mechanism or exception recognised under UK law. The ICO's international transfers guide explains the options. Some of our service providers may also process information outside the UK under similar safeguards.

How long we keep it

Retention periods by type of information
Information	How long
Enquiries that do not lead to an introduction	12 months after our last contact with you, then deleted or anonymised
Introductions and referral records	For as long as needed for accounting and tax and to resolve disputes about who introduced whom, typically up to six years
Marketing preferences and opt-outs	Until you withdraw consent. We keep a minimal suppression record so we honour your opt-out
General correspondence	Up to 24 months after the matter closes
Security and server logs, and anti-spam records (hashed)	Typically up to 90 days

We may keep information for longer where the law requires it or where it is needed to establish, exercise or defend legal claims.

Your rights

Under UK data protection law you may have the right to:

be told how your information is used (this notice);
access a copy of the personal information we hold about you;
have inaccurate information corrected;
have information erased in certain circumstances;
restrict or object to certain processing, including processing based on legitimate interests;
receive information you provided in a portable format where the law provides for this;
withdraw consent at any time, where we rely on it.

To exercise a right, email [privacy contact email]. We may ask you to confirm your identity. We aim to respond within one month. If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Other things to know

Children. This site is for businesses and is not aimed at anyone under 18.
Security. We use access controls, encryption in transit and limits on who can see enquiries. No system is perfectly secure, so please follow the guidance above and do not send us sensitive material.
Visitors from outside the UK. Our site is operated from the United Kingdom, so information you give us is processed here under UK law.
Changes. We will update this notice when our practices change and show the date at the top. Material changes will be flagged on the site.