Privacy Policy

At Valid8 IP Ltd, we are a data services provider committed to connecting people with the information and support they need. We often serve as a intermediary, facilitating partnerships between data companies and organisations that provide valuable advice and services to consumers. Additionally, we offer our own services directly to consumers, ensuring they have access to the solutions that matter most to them. Your privacy and trust are at the core of everything we do, and we’re here to deliver seamless, reliable, and secure experiences.

Our postal address and contact details are: -

  1. Deansfield House
  2. 98 Lancaster Road
  3. Newcastle, England
  4. ST5 1DS
  5. Email – DP@valid8.cloud

We are registered with the Information Commissioner’s Office (Registration Reference ZA233232).

This privacy policy sets out how Valid8 IP Ltd, collects, uses and protects your information when you use this website or our services, in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

Valid8 IP Ltd is the controller and is responsible for your personal data. We are committed to ensuring that your privacy is protected. By using our website and/or our services, you may be providing us with some of your personal information and we want to make sure that we do not use your data in a way that you would not expect. Valid8 IP Ltd assure you that your personal information will only be used in accordance with this privacy policy and in compliance with the latest privacy regulations.

Valid8 IP Ltd may change this policy in future by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective 08/04/2025.

Personal Information We Collect

Personal information is any information about an individual from which that person can be identified. It does not include data which has been anonymised.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  1. Contact information: Name, current and previous addresses (including postal, email and IP addresses) and telephone numbers.
  2. Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
  3. Financial Data: includes information on your financial circumstances, the lenders or financial institutions used by you, the financial products you have taken out and the details and status of those financial products.
  4. Special Category Data: We will only process special category data where you have provided this to us and given your explicit consent to store it or we have a legal/regulatory obligation to do so. This may include information pertaining to health issues and vulnerabilities to ensure you receive the appropriate support.

This list may not include all the information we require when providing our service/s. The information we ask you for will relate to your specific enquiry and will only consist of the information we need to carry out our service. If you contact us other than via our website, we will keep a record of that correspondence.

Method of collection

  1. Direct interactions: By you filling in forms on our website or by corresponding with us by post, phone, email or otherwise.
  2. Third parties: We may receive information about you from a third-party partner firm who you have provide permission to share your data.
  3. Public sources: The DVLA or from publicly available data.
  4. Credit Reference Agencies: Equifax, Experian and TransUnion (for credit reports)
  5. Data Sharing Platform: Equifax Ltd (for sharing bank transaction data)

We will always inform you where we have obtained your information from if requested by you.

The basis on which we process your information

The legal grounds for processing your personal information depend upon the nature of our relationship with you and the context of processing and are as follows:

  1. Processing is necessary for the performance of a contract with you, or to take steps prior to entering into a contract with you.
  2. Processing is necessary for the purposes of your legitimate interests or our legitimate interests, where your fundamental rights and interests do not override those interests. In order to determine this we shall undertake a Legitimate Interests Assessment and balancing test.
  3. Processing is necessary for compliance with mandatory legal or regulatory obligations which we are subject to.
  4. Processing is undertaken after you have given us your express consent.

What we use your personal information for

We collect/store or use your information to… Legal basis
provide the service you have requested Contract
send to your claims management company, solicitor, law firm, debt management firm, insolvency practitioner, mortgage provider or other companies we work with Consent
send to our service provider/contractor partners (e.g. credit reference agencies) Legitimate Interests and/or Consent
provide annual statistics to our regulator Legal obligation
resolve complaints against us or the establishment, exercise or defence of legal claims Legitimate Interests and/or Legal Obligation
gather feedback to enable us to improve our website, products and services Legitimate Interests
verify your identity where we receive requests to access or change the information we hold about you Legal Obligation
maintain our accounts and records Legal obligation
comply with legal and regulatory obligations Legal obligation
research and analyse trends to better understand how users are using our website and services in order to improve them Legitimate Interests
inform you about changes in our services and important service related notices, such as security and fraud issues Legal obligation
maintaining insurance coverage, managing risks, or obtaining professional advice Legitimate interests and/or Legal Obligation

Providing your personal data to others

We will disclose personal data to credit reference agencies/credit information services providers Equifax Ltd, Experian Ltd, TransUnion, for the purposes of obtaining your credit file or open banking. If you’d like to understand how the credit reference agencies use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information Notice (CRAIN) www.transunion.co.uk/crain ; https://www.equifax.co.uk/crain/; https://www.experian.co.uk/legal/crain/.

We will disclose your data to companies you are working with such as claims management companies, debt management firms, insolvency practitioners, solicitors or law firms, mortgage advisers and other companies we work with upon your consent to do so, for the purpose of enabling them to provide relevant services to you. Each such third party will act as a data controller in relation to the data that we supply to it; and each such third party will supply to you a copy of its own privacy policy, which will govern that third party’s use of your personal data.

We may disclose your personal data to insurers, compliance consultants and/or professional advisers in so far as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

We may disclose personal data to our suppliers or subcontractors, such as external printers, IT service providers, administration support providers as listed:

Third Party Provider
Microsoft Azure
Microsoft Devops
Experian
TransUnion
Equifax
Ideal Postcodes
GetAddress.io
DVLASearch
SendGrid
Stripe

The above list is not exhaustive however, any external processors who process your data on our behalf, are subject to a data processing agreement to ensure the safety and protection of your data. None of our processors are allowed to use your data for any other purposes than instructed by us.

In addition to the specific disclosures of personal data set out in this section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

\

We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. These cookies are stored by the browser on your device. They can be used for a variety of purposes, such as identifying your previous visits to a website, researching the most popular features of a website.

For further information please feel free to visit our cookie policy page. You can set your browser not to accept cookies and the following websites (www.aboutcookies.org or www.allaboutcookies.org) tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.

Google cookies

Valid8 IP Ltd uses Google Analytics to monitor the use of its website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated relating to our website is used to create reports about the use of the website. Google will store and use this information. Google’s privacy policy is available at: http://www.google.com/privacypolicy.html

Refusing cookies

Most browsers allow you to refuse to accept cookies. Please see below for further details:

Microsoft Edge: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d

Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-site-preferences?redirectlocale=en-US&redirectslug=Blocking+cookies

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB

Safari: https://support.apple.com/kb/ph21411?locale=en_US

Opera : http://www.opera.com/help/tutorials/security/privacy/

Please note: The Valid8 IP Ltd website contains hyperlinks to websites owned and operated by third parties. These third-party websites will have their own privacy policies, including cookies, and we suggest that you check them. They will govern the use of any personal information which is collected by cookies while visiting these websites. Valid8 IP Ltd cannot accept any responsibility or liability for the privacy practices of such third-party websites and your use of such websites is at your own risk.

How long do we keep your personal information

We retain your information for as long as is necessary for the purpose for which it was originally obtained. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Credit Reports - will be stored for 30 days and then pseudonymised.

Banking Transaction Data - will be stored for 30 days and then deleted.

However, we have some legal and regulatory obligations to hold certain pieces of information for specific timeframes.

We also need to keep some of your information for our accounting and reporting requirements.

Your Rights

You have the following rights in accordance with the UK GDPR and the DPA:

  1. To know that your data is being processed
  2. To access your personal data free of charge
  3. To have your information corrected if inaccurate (including ensuring any third party puts right any inaccuracy)
  4. To request that your data be erased
  5. To restrict processing
  6. To request transfer of your data
  7. To object to processing and;
  8. Rights relating to automated decision making and profiling

If you wish to exercise any of the rights set out above, please contact us using the details set out at the beginning of this privacy policy.

You may request that we to provide you with any personal information we hold about you. Where you send us a request to access your data, this will usually be free of change and sent to you within one calendar month (unless your request is complex, in which it could take a maximum of three calendar months). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity before we are able to process your request.

We may withhold personal information that you request to the extent permitted by law.

You may instruct us at any time not to process your personal information for marketing purposes.

If at any point you wish to raise a complaint regarding our data handling then you have the right to complain to the Information Commissioner’s Office (ICO) the supervisory authority for data protection issues in the UK whose information is available at www.ico.org.uk. However, we would appreciate to opportunity to deal with any concerns directly with you in the first instance.

The ICO’s address:

  1. Information Commissioner’s Office
  2. Wycliffe House
  3. Water Lane, Wilmslow
  4. TCheshire
  5. SK9 5AF
  6. Helpline number: 0303 123 1113
  7. ICO website: https://www.ico.org.uk

Security

Valid8 IP Ltd recognise the personal nature of the information we collect, process and store. Valid8 IP Ltd is committed to good data management to protect people from harm. All personal data provided to us is stored on our secure servers. As we are committed to ensuring that your information is secure, we have put in place suitable physical, electronic and managerial procedures to prevent loss, unauthorised access, misuse or disclosure and to make sure that your information is safe and secure. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which may be collected or you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

General and opt out

You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.

If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

If you have any queries relating to our Privacy Policy or the personal data we hold about you, wish to opt out of marketing or you wish to invoke any of your legal rights, you can contact us the details set out at the beginning of this privacy policy.