1. Who is responsible
Global Data Intelligence Limited is the controller for the website processing described here. We are registered in England and Wales, company number 09410808, at Artisans’ House, 7 Queensbridge, Northampton, Northamptonshire, NN4 7BF, United Kingdom. Business Credit Reports is our service brand.
Contact us through the privacy request page, the contact page or by post addressed to "Privacy Team" at our registered office. You do not need to be a customer. For information about people listed in our business-information products, read the separate business data privacy notice.
2. What we collect
- Enquiries and quotations: first and last name, email, company, phone number, message, requested delivery and any company report context you choose to provide.
- PDF requests: name, email, phone number, company and the originating page. A request is a request for follow-up; it does not itself purchase a report.
- Searches: the country, company name or identifier and other search details you enter, sent to our company search service to return results. A sole trader’s name may identify a person.
- Privacy requests: the name, reply email, request category, optional record reference and explanation you submit, plus verification and correspondence needed to respond.
- Technical and security information: IP address and request metadata processed by hosting infrastructure, and limited request references, hashes and abuse-prevention counters.
- Source context, analytics and preferences: the current form page’s campaign labels and referring site/path when available. Advertising click identifiers are included only if you have opted into marketing attribution. We store your privacy choice in your browser. Where configured and consented, Google Analytics measures page visits and successful enquiries; our analytics events exclude form contents and company search details.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Answer an enquiry, arrange a demonstration or prepare a business quotation | Legitimate interests in responding to business requests. Contract or pre-contract steps where you personally are the contracting party. |
| Deliver an agreed service and manage customer contacts | Legitimate interests in performing business contracts; contractual necessity where the contract is with the individual. |
| Provide a company search requested by you | Legitimate interests in delivering the requested business-information service. |
| Protect the site, prevent abuse and keep delivery receipts | Legitimate interests in security, reliability and preventing duplicate submissions. |
| Handle privacy rights and comply with lawful requirements | Legal obligation, and legitimate interests in maintaining appropriate evidence and resolving claims. |
| Attach optional advertising click references to a submitted enquiry, or run optional visit analytics where enabled | Your consent. You may change your choice at any time. |
When we rely on legitimate interests, those interests must be necessary and balanced against your rights and reasonable expectations. You can object. Public availability or a business context does not remove data protection obligations.
4. Forms and marketing
Required fields on sales forms help us identify the business, respond and scope the request. If you prefer not to provide a phone number or company details for a privacy matter, use the privacy request route instead. Please provide only relevant information and do not send identity documents, passwords, bank details or sensitive personal information through these forms.
Submitting an enquiry asks us to respond about that enquiry. It does not subscribe you to a newsletter or consent to unrelated marketing. If we offer optional subscriptions, the choice must be separate. Any other business marketing must have its own lawful basis and comply with applicable electronic marketing rules, including rules for sole traders, objections and suppression lists.
5. Who receives the information
Our authorised staff and service providers receive information only as needed for the relevant purpose. Website sales enquiries and quote requests are submitted server-to-server to HubSpot for handling. PDF requests and privacy requests are stored in restricted website storage. Privacy requests are kept separately from sales enquiries and are not automatically sent to HubSpot.
Our website uses OpenAI’s ChatGPT Sites service and Cloudflare hosting and storage infrastructure. These providers process technical information needed to deliver and protect the site. Where enabled and consented, Google receives usage information through Google Analytics; advertising features are disabled. Details of their contracting entities, service scope and locations can be requested for a relevant procurement or privacy assessment. This list describes this website; it is not a complete subprocessor list for every product.
We may disclose information to professional advisers, authorities where legally required, or a purchaser in a genuine business transaction subject to appropriate safeguards. We do not add your submitted enquiry details to a licensed business-contact dataset merely because you contacted us. Business records independently included in our products are covered separately.
6. International processing
Our company operates in the United Kingdom and uses international service providers and support operations. Information may be processed outside your country, including in the UK, EEA, United States or Moldova where relevant to the service or authorised support. This website does not promise that all information remains in one country.
Where data protection law restricts a transfer, a valid mechanism is required, such as an applicable adequacy decision or appropriate contractual safeguards with the necessary risk assessment and supplementary measures. EU standard contractual clauses alone do not satisfy UK restricted-transfer requirements without the appropriate UK mechanism. Ask the Privacy Team for the safeguards and locations applicable to your information, including a copy subject to necessary redactions. We do not rely on your cookie choice as a general authorisation for international transfers.
7. How long information is kept
| Information | Retention approach |
|---|---|
| Enquiries and customer correspondence | For the enquiry and any resulting business relationship, then only as needed for documented business, dispute or legal requirements. Unneeded information should be deleted or anonymised. |
| Invoices and contractual records | Normally six years after the relevant financial year or end of the relationship, with longer retention only where a specific legal obligation or claim requires it. |
| Privacy request records | For handling the request and subsequently only as necessary to demonstrate the response, maintain an objection or suppression and address claims. |
| Security counters and delivery receipts | For abuse prevention, reliable delivery and investigation; raw contact details are not stored in contact or quotation delivery receipts. |
| Browser privacy preference | 180 days, unless you change or remove it earlier. Clearing browser storage removes the saved preference. |
Retention depends on the record’s purpose, applicable law, accuracy, security and any active dispute. A suppression record may need to be kept to ensure that information is not reintroduced or marketing restarted. You may ask for the period applicable to a particular record.
8. Your rights
Depending on applicable law and the processing, you may request access, correction, erasure, restriction, portability, information about sources and recipients, or object to processing. Portability generally applies to information you provided that is processed automatically on consent or contract grounds. You may withdraw consent without affecting earlier lawful processing. Rights can have legal exceptions, which we will explain where relevant.
An objection to direct marketing is absolute for that purpose, including related profiling. An objection to other legitimate-interest processing is assessed under the applicable legal test. A request to remove a product record does not itself remove the original official register entry.
Use the privacy request page. We normally respond without undue delay and within one month for UK/EU rights requests, subject to lawful identity checks, extensions and other applicable rules. If an extension is necessary, we will explain it within the applicable initial period. Requests are normally free. Proportionate verification may be needed for access or deletion; do not send identity documents unless we specifically arrange a secure route.
9. Automated processing and third-party tools
The website does not itself grant or refuse credit, approve a supplier or make a legally significant decision about an individual. Company search, matching and report indicators can be generated automatically, but they are research inputs. Customers determine their own use and must assess any rules on profiling, regulated decisions or decisions about sole traders and other individuals.
If you use our data through an external AI assistant, MCP client, CRM or other integration, that provider’s processing is governed by its own terms and your arrangements. Do not disclose personal or confidential information to a connected tool without appropriate authority.
10. Additional rights under US state law
Where California or another US state privacy law applies, eligible residents may have rights to know, access, correct or delete information, opt out of sale, sharing or targeted advertising, limit certain sensitive-data uses, and appeal a refusal where the law provides. Exercising rights must not result in unlawful discrimination. Licensing personal business information can fall within a legal definition of "sale" even where it is not website advertising.
Use Your privacy choices to submit an opt-out or other request, including through an authorised agent where permitted. Access and deletion may require verification; an opt-out does not require an account or proof of identity beyond information needed to locate the relevant record. A Global Privacy Control signal disables optional analytics and marketing attribution for this browser. If you want a separately held business-data record suppressed, provide enough information to identify it through the same request route.
11. Security, children and external sites
Access to stored form information is restricted through server-side authorisation. Forms use HTTPS in production, bounded input handling and abuse controls. No system is completely secure. Tell us promptly if you believe there is a security problem, without sending passwords or exploiting the issue.
The services are intended for business users, not children. Do not knowingly submit children’s information. Links to external registries, third-party services and our other products may lead to separate notices and processing practices.
12. Complaints and changes
You can raise a concern with our Privacy Team, but you do not have to contact us before complaining to a regulator. In the UK, contact the Information Commissioner’s Office. In the EEA, you may contact your local supervisory authority. Other local complaint and appeal rights remain available.
We will date updates to this notice and provide additional notice where a material change in processing requires it. New purposes require an appropriate lawful basis and any further information or choice required by law.
Global Data Intelligence Limited · 25 October 2026
All legal documents ↗Privacy requests ↗Back to top ↑