Privacy Policy

1. Introduction

Receiv-r Ltd (‘we’, ‘us’, ‘our’) is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all users of www.receiv-r.co.uk and the Receiv-r platform.

2. Data We Collect

2.1 Account and Registration Data

When you create an account, we collect:

• Full name
• Email address
• Mobile phone number — used to contact you about your account and to ask how your experience with the service is going
• Company name and role (if provided)
• Password (stored in encrypted form — we never store plain text passwords)

2.2 Billing and Payment Data

Payment processing is handled entirely by Stripe. We do not store your card details. We receive from Stripe:

• Billing name and address
• Payment status and transaction history
• Subscription plan and renewal dates

2.3 Usage Data

We collect data about how you use the platform, including:

• Companies searched and unlocked
• Pages visited and features used
• IP address, browser type, and device information
• Login timestamps and session data
• Request counts used to apply fair-use limits, and a record of each data export (when it was made, which companies it contained and its export reference)

2.4 Communications

If you contact us by email or through the platform, we retain those communications to respond to your enquiry and improve our service.

2.5 Data About Third Parties (Insolvency Practitioners)

The platform surfaces contact information about insolvency practitioners. This data is sourced from Companies House filings and publicly available web sources. It is publicly available professional data processed under the legitimate interests basis, and relates to individuals in their professional capacity only. This contact information can include business contact details, which we make available to our subscribers within the platform so they can contact the relevant professional.

2.6 Data From Public Registers (Distress-Intelligence Data)

Receiv-r’s core service identifies UK property-linked companies and assets that show signs of financial distress. To do this, we collect and process information from the following public sources:

• Companies House — company filings, registered charges, insolvency and related filings, and information about directors and officers acting in their professional capacity;
• The Gazette (comprising the London, Edinburgh and Belfast Gazettes) — official public notices, including notices of administration, receivership, liquidation, insolvency and related proceedings;
• HM Land Registry — ownership and charge data for property in England and Wales, and historic transaction price information.

The transaction price information is property-level data published without the names of buyers or sellers, so it generally does not identify individuals. Where any public data we use could relate to an identifiable person, we treat it as personal data and handle it as set out below.

Some of this information is personal data. For example, the names and professional roles of company directors, officers, or other individuals connected to a company or property. Where it is, we process it as follows:

• Source: We obtain this information from the public sources listed above, rather than from the individuals concerned.
• Categories: names and professional roles; associations with companies and properties; the existence and nature of filings, charges, notices or proceedings; where publicly available, professional contact details such as business email addresses and telephone numbers; and a risk indicator or score derived from that information.
• Purpose: to provide our subscribers with early intelligence on distressed property-linked companies and assets.
• Lawful basis: legitimate interests (see Section 4). We have carried out and documented a Legitimate Interests Assessment weighing our and our subscribers’ interests against the rights and freedoms of the individuals concerned.
• Recipients: we make this information, including any professional contact details such as email addresses, available to our subscribers within the platform so they can identify and contact the relevant parties. We do not sell personal data to third parties, such as data brokers or advertisers, for their own purposes.

We use public data only in accordance with the terms under which each source is made available, and we attribute Crown copyright and the relevant public-sector licences where required. We do not use HM Land Registry ownership data to send direct marketing to registered property owners.

Inclusion is not an allegation. The presence of a company, property or associated individual in Receiv-r does not mean that person is personally insolvent, has done anything wrong, or is the subject of any allegation. Our data reflects publicly filed information and a derived risk indicator only, and may not always be complete or fully up to date. Individuals can ask us to correct or remove their data (see Section 10).

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and operate the Receiv-r platform and your account
• To process subscription payments and manage billing
• To send transactional emails (receipts, alerts, account notifications)
• To send product updates and service announcements (you may opt out at any time)
• To contact you, including by phone or text message, to ask about your experience and gather feedback on the service
• To improve the platform through usage analytics
• To comply with legal obligations
• To detect and prevent fraud or abuse

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract — processing necessary to provide the service you have subscribed to
• Legitimate interests — platform analytics, fraud prevention, service improvement; and the collection and processing of personal data from public registers to operate our distress-intelligence service (see Section 2.6). We have assessed and documented this basis in a Legitimate Interests Assessment, and you may object at any time (see Section 10).
• Legal obligation — compliance with tax, accounting, and regulatory requirements
• Legitimate interests — sending product news and offers about Receiv-r by email to people who have signed up. You are told at sign up that we may send them, every email has an unsubscribe link, and you can opt out at any time (see Section 5).

5. Email Alerts and Marketing

We send four kinds of optional email: alert emails (new matches for the alerts you have saved, and updates on companies on your watchlist), a weekly summary, account and plan emails (your welcome email, trial reminders and plan confirmations), and product news and offers.

We tell you at sign up that we may send you product news and offers about Receiv-r. We send them only to people who have not opted out, and every one has an unsubscribe link. Resend, our email provider, sends them for us as our processor, using your email address, first name and an account reference.

You can turn each kind off, or stop all of them, at any time under Email preferences in your account settings, using the unsubscribe link in any of these emails, or by contacting hello@receiv-r.co.uk. The unsubscribe link works without signing in. If an email to you is reported as spam or permanently bounces, we stop all optional emails to that address.

Essential account emails, such as password resets, email confirmations and team invitations, are always sent because the service cannot work without them.

6. Data Sharing and Third Parties

We do not sell your personal data. We share data only with trusted third parties as follows:

• Stripe — payment processing (subject to Stripe's own privacy policy)
• Hosting and infrastructure providers — for platform operation (data stored in UK/EEA)
• Analytics providers — anonymised usage data to understand platform performance
• Legal and regulatory bodies — where required by law

All third-party providers are bound by data processing agreements and are required to process data only for the purposes we specify.

7. Data Retention

We retain your personal data for as long as your account is active and for a period thereafter as required by law:

• Account data — retained for the duration of your account plus 3 years
• Billing records — retained for 7 years (HMRC requirement)
• Usage logs — retained for 12 months
• Communications — retained for 3 years

You may request deletion of your account and associated data at any time (subject to legal retention obligations).

8. Cookies

Receiv-r only uses cookies that are strictly necessary for the platform to work, so we do not ask for cookie consent. These are:

• Sign-in cookies that keep you logged in to your account
• A preference cookie that remembers your light or dark display setting, if you choose one
• Security cookies set by Cloudflare to protect our sign-up and sign-in forms from bots

We do not use advertising or tracking cookies. To understand how the site is used, we use Vercel Web Analytics, which counts page visits without cookies and without identifying you. Payments are handled on Stripe's own checkout pages, which are covered by Stripe's privacy policy.

You can block or delete cookies in your browser settings, but you will not be able to sign in without them.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted data transmission (TLS/HTTPS across the platform)
• Encrypted password storage
• Access controls limiting who can access personal data internally
• Regular security reviews

No method of transmission over the internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO as required by law.

10. Your Rights

Under UK GDPR you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data (subject to legal obligations)
• Right to restriction — to limit how we process your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you

To exercise any of these rights, contact us at hello@receiv-r.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

If your professional contact details appear on Receiv-r and you do not hold an account, you can request removal or correction at receiv-r.co.uk/remove-my-data. We will delete the matching records and add them to a do-not-collect list so they are not picked up again by our enrichment process.

If you are an individual whose personal data appears in our distress-intelligence data (for example, as a company director) and you do not hold an account, the same routes apply: you can object to our processing, or request rectification or removal, at receiv-r.co.uk/remove-my-data. Because we rely on legitimate interests for this processing, you have the right to object at any time, and we will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests.

Automated processing. We generate risk indicators and scores about companies and property through automated processing of public data. These are provided to our subscribers as intelligence and do not produce legal effects, or similarly significant effects, on the individuals connected to that data. We do not make solely automated decisions that have a legal or similarly significant effect on you.

11. International Transfers

We store and process data primarily within the UK and EEA. Where any data is transferred outside these areas, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. Children

Receiv-r is a professional B2B platform not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. The current version is always available at www.receiv-r.co.uk/privacy.

14. Contact and Complaints

For any privacy-related queries, to exercise your rights, or to raise a concern: