Privacy Policy

1. Introduction

Receiv-r Ltd (‘we’, ‘us’, ‘our’) is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all users of www.receiv-r.co.uk and the Receiv-r platform.

2. Data We Collect

2.1 Account and Registration Data

When you create an account, we collect:

• Full name
• Email address
• Mobile phone number — used to contact you about your account and to ask how your experience with the service is going
• Company name and role (if provided)
• Password (stored in encrypted form — we never store plain text passwords)

2.2 Billing and Payment Data

Payment processing is handled entirely by Stripe. We do not store your card details. We receive from Stripe:

• Billing name and address
• Payment status and transaction history
• Subscription plan and renewal dates

2.3 Usage Data

We collect data about how you use the platform, including:

• Companies searched and unlocked
• Pages visited and features used
• IP address, browser type, and device information
• Login timestamps and session data

2.4 Communications

If you contact us by email or through the platform, we retain those communications to respond to your enquiry and improve our service.

2.5 Data About Third Parties (Insolvency Practitioners)

The platform surfaces contact information about insolvency practitioners. This data is sourced from Companies House filings and publicly available web sources. It is publicly available professional data processed under the legitimate interests basis, and relates to individuals in their professional capacity only. This contact information can include business contact details, which we make available to our subscribers within the platform so they can contact the relevant professional.

2.6 Data From Public Registers (Distress-Intelligence Data)

Receiv-r’s core service identifies UK property-linked companies and assets that show signs of financial distress. To do this, we collect and process information from the following public sources:

• Companies House — company filings, registered charges, insolvency and related filings, and information about directors and officers acting in their professional capacity;
• The Gazette (comprising the London, Edinburgh and Belfast Gazettes) — official public notices, including notices of administration, receivership, liquidation, insolvency and related proceedings;
• HM Land Registry — ownership and charge data for property in England and Wales, and historic transaction price information.

The transaction price information is property-level data published without the names of buyers or sellers, so it generally does not identify individuals. Where any public data we use could relate to an identifiable person, we treat it as personal data and handle it as set out below.

Some of this information is personal data. For example, the names and professional roles of company directors, officers, or other individuals connected to a company or property. Where it is, we process it as follows:

• Source: We obtain this information from the public sources listed above, rather than from the individuals concerned.
• Categories: names and professional roles; associations with companies and properties; the existence and nature of filings, charges, notices or proceedings; where publicly available, professional contact details such as business email addresses and telephone numbers; and a risk indicator or score derived from that information.
• Purpose: to provide our subscribers with early intelligence on distressed property-linked companies and assets.
• Lawful basis: legitimate interests (see Section 4). We have carried out and documented a Legitimate Interests Assessment weighing our and our subscribers’ interests against the rights and freedoms of the individuals concerned.
• Recipients: we make this information, including any professional contact details such as email addresses, available to our subscribers within the platform so they can identify and contact the relevant parties. We do not sell personal data to third parties, such as data brokers or advertisers, for their own purposes.

We use public data only in accordance with the terms under which each source is made available, and we attribute Crown copyright and the relevant public-sector licences where required. We do not use HM Land Registry ownership data to send direct marketing to registered property owners.

Inclusion is not an allegation. The presence of a company, property or associated individual in Receiv-r does not mean that person is personally insolvent, has done anything wrong, or is the subject of any allegation. Our data reflects publicly filed information and a derived risk indicator only, and may not always be complete or fully up to date. Individuals can ask us to correct or remove their data (see Section 10).

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and operate the Receiv-r platform and your account
• To process subscription payments and manage billing
• To send transactional emails (receipts, alerts, account notifications)
• To send product updates and service announcements (you may opt out at any time)
• To contact you, including by phone or text message, to ask about your experience and gather feedback on the service
• To improve the platform through usage analytics
• To comply with legal obligations
• To detect and prevent fraud or abuse

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract — processing necessary to provide the service you have subscribed to
• Legitimate interests — platform analytics, fraud prevention, service improvement; and the collection and processing of personal data from public registers to operate our distress-intelligence service (see Section 2.6). We have assessed and documented this basis in a Legitimate Interests Assessment, and you may object at any time (see Section 10).
• Legal obligation — compliance with tax, accounting, and regulatory requirements
• Consent — marketing communications (where you have opted in)

5. Email Alerts and Marketing

As part of the service, we send daily email alerts for new distressed property opportunities. These are service communications and form part of your subscription. You may adjust alert preferences in your account settings.

We may also send product updates and occasional marketing communications. You may unsubscribe from marketing emails at any time using the link in each email or by contacting hello@receiv-r.co.uk.

6. Data Sharing and Third Parties

We do not sell your personal data. We share data only with trusted third parties as follows:

• Stripe — payment processing (subject to Stripe's own privacy policy)
• Hosting and infrastructure providers — for platform operation (data stored in UK/EEA)
• Analytics providers — anonymised usage data to understand platform performance
• Legal and regulatory bodies — where required by law

All third-party providers are bound by data processing agreements and are required to process data only for the purposes we specify.

7. Data Retention

We retain your personal data for as long as your account is active and for a period thereafter as required by law:

• Account data — retained for the duration of your account plus 3 years
• Billing records — retained for 7 years (HMRC requirement)
• Usage logs — retained for 12 months
• Communications — retained for 3 years

You may request deletion of your account and associated data at any time (subject to legal retention obligations).

8. Cookies

Receiv-r uses cookies and similar technologies to operate the platform and understand how it is used. Essential cookies are required for the platform to function. Analytics cookies are used to understand usage patterns.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted data transmission (TLS/HTTPS across the platform)
• Encrypted password storage
• Access controls limiting who can access personal data internally
• Regular security reviews

No method of transmission over the internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO as required by law.

10. Your Rights

Under UK GDPR you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data (subject to legal obligations)
• Right to restriction — to limit how we process your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you

To exercise any of these rights, contact us at hello@receiv-r.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

If your professional contact details appear on Receiv-r and you do not hold an account, you can request removal or correction at receiv-r.co.uk/remove-my-data. We will delete the matching records and add them to a do-not-collect list so they are not picked up again by our enrichment process.

If you are an individual whose personal data appears in our distress-intelligence data (for example, as a company director) and you do not hold an account, the same routes apply: you can object to our processing, or request rectification or removal, at receiv-r.co.uk/remove-my-data. Because we rely on legitimate interests for this processing, you have the right to object at any time, and we will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests.

Automated processing. We generate risk indicators and scores about companies and property through automated processing of public data. These are provided to our subscribers as intelligence and do not produce legal effects, or similarly significant effects, on the individuals connected to that data. We do not make solely automated decisions that have a legal or similarly significant effect on you.

11. International Transfers

We store and process data primarily within the UK and EEA. Where any data is transferred outside these areas, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. Children

Receiv-r is a professional B2B platform not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. The current version is always available at www.receiv-r.co.uk/privacy.

14. Contact and Complaints

For any privacy-related queries, to exercise your rights, or to raise a concern: