• full legal name
• email address
• address
• date of birth and place of birth
• IP address
• login data, operating system, browser type and version (which may not always be personal data)
• location (which may not always be personal data) and
• your marketing and communication preferences. We use different methods to collect data from and about you including:
• when you voluntarily supply personal data to us, for example:
• if you use our services and provide us with personal data (by signing up to our services or similar activities in which you volunteer data about yourself)
and
• if you contact us by post, telephone or email
• when we obtain a certificate or other document that you have asked us to obtain for you, and in doing so we obtain further personal data about you
• we may also collect information about you when you use our website through the use of technologies such as cookies
• through publicly available sources, for example Companies House and other government authorities.

• where we need to perform the contract we are about to enter into or have entered into with you
• where you have given your consent
• where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests and/or
• where we need to do so in order to comply with a legal or regulatory obligation.

What We Do

• Use your personal information to register you as a new user.
• Use your contact details and name to respond to any queries or discussions, and to contact you, in relation to our services.
• Use your contact details to send you email marketing about similar services to those that we have already provided to you.
• Use your personal data as required to fulfil any obligations arising from any contracts entered into between us and you, including obtaining certificates or other records from the relevant public registries.
• To send you periodic email or notifications about our services and any updates or changes to them.
• To create and analyse usage of our services and our website, data on the devices used to access our services and our website, including to monitor and improve performance.

Our Legal Basis for Processing

• We need to do this in order to fulfil our contract to set you up as a user and to provide our services to you, and it is in our legitimate interests to allow you access the services.
• We do this on the basis that it is necessary for our legitimate interests to provide a high service level to you, and to develop our services and grow our business. Such legitimate interests are not overridden by your rights and freedoms, as we will only contact you on a limited and appropriate basis.
• We do this on the basis that it is necessary for the purposes of our legitimate interests so that we can provide you with relevant information as to our services.
  You will always have the option to opt-out of these marketing emails.
• We do this on the basis that it is necessary for the performance of our contract with you.
• We do this on the basis that it is in our legitimate interest to keep you up to date on our services.
• We do this on the basis that it is necessary in our legitimate interests to constantly monitor and seek to improve our performance.

• it is necessary in our legitimate interest to ensure that our services are being used appropriately and lawfully; and
• where relevant, it is necessary to protect your or any third party’s vital interests – this will only be the basis where we have reason to believe that you or any third party have or may come to harm.

Marketing:

Depending on how and why you provide us with your personal data we may share it in the following ways: 

• • with government authorities and other third parties who hold the certificates or other records that we are obtaining for you as part of our provision of services;
  • we may share your personal information with any member of our company group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006;
  • with selected third parties, such as law enforcement, regulatory authorities or where we are legally obliged to share the information, or service providers, such as professional advisers including lawyers, bankers, auditors and insurers based in the United Kingdom who provide consultancy, banking, legal, insurance and accounting services, and with analytics and search engine providers that assist us in the improvement and optimisation of our services; and

We may also disclose your personal information to third parties in the following events:

• • • if we were to sell or buy any business or assets, in which case we might disclose your personal information to the prospective seller or buyer of such business or assets as part of that sale;
    • if UK Archives or substantially all of our assets are acquired by a third party, in which case personal information held by us about our customers will be one of the transferred assets;
    • if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or to protect the rights, property, or safety of us, you or any third party or if we are asked to provide your details to a lawful authority in order to aid in the investigation of crime or disorder; this includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction; and/or
    • in order to enforce or apply the our terms of use or other terms and conditions.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.

We do not sell, trade, or otherwise transfer your personal identifiable information to outside parties other than as set out in this privacy policy.

Please note that some of our service providers may be based outside of the European Economic Area (the “EEA”). By submitting your personal information, you agree to this transfer, storing or processing. Where we transfer your data to a service provider that is outside of the EEA we seek to ensure that appropriate safeguards are in place to make sure that your personal data is held securely and that your rights as a data subject are upheld. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• • we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
  • where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe; or
  • where another method accepted by the European Commission as providing adequate protection to personal data shared between Europe and another country exists and is implemented.