Privacy Policy

1. Purpose

This privacy policy explains how PensionIntel (“we”, “us”, “our”) collects and uses personal data when you use our website at pensionintel.co.uk (the “Site”), in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) where they apply.

This information is general in nature and does not constitute legal advice. You should obtain professional advice for your specific circumstances.

2. Data controller

The data controller for personal data processed through the Site is PensionIntel. Contact: [email protected]

3. What we collect

Depending on how you use the Site, we may process:

• Contact details you send us (for example name, email address, phone number) if you email us or contact us through details published on the Site.
• Technical and usage data such as IP address, browser type, device type, and pages viewed, collected via server logs, essential cookies, or analytics tools if we enable them and obtain consent where required.
• Communications including the content of emails or messages you send to us.

We aim to collect only what is adequate, relevant, and limited to what we need (data minimisation).

4. How we use personal data and lawful bases

We use personal data for purposes such as:

• Responding to enquiries — lawful basis: legitimate interests in operating our business and communicating with prospective customers, or performance of a contract where applicable.
• Operating and securing the Site — lawful basis: legitimate interests in security, fraud prevention, and service improvement; where strictly necessary, legal obligations.
• Marketing — we will only send electronic marketing where permitted by law, typically with your consent or under the “soft opt-in” rules for existing customers where those apply.
• Analytics — if we use non-essential analytics cookies or similar technologies, we will rely on consent where PECR requires it.

5. Cookies

We explain the cookies and similar technologies we use in our Cookie policy.

6. Recipients and processors

We may share personal data with trusted service providers who process data on our instructions (for example hosting, email delivery, or IT support). We require them to protect personal data appropriately. We do not sell your personal data.

7. International transfers

If we transfer personal data outside the United Kingdom, we will ensure appropriate safeguards are in place (such as the UK International Data Transfer Agreement / Addendum or adequacy regulations), unless an exception applies.

8. Retention

We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. Retention periods depend on the context (for example, enquiry emails may be kept for a limited period unless a longer period is justified).

9. Your rights

Under UK data protection law you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request erasure in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests, where applicable.
• Data portability, where applicable.
• Withdraw consent at any time, where we rely on consent (this does not affect processing before withdrawal).
• Lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk.

To exercise your rights, contact us at [email protected]. We may need to verify your identity.

10. Security

We implement appropriate technical and organisational measures to protect personal data. No method of transmission over the internet is completely secure.

11. Children

The Site is not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe we have, please contact us so we can delete it.

12. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do.