ValPal Ltd - Privacy Policy

Background

ValPal Ltd ('we', 'our', or 'us') is the publisher of this site. We are dedicated to safeguarding and preserving your privacy when visiting our site or communicating electronically with us.

ValPal Ltd is the controller of personal data collected via our websites. Where we process personal data on behalf of our clients (for example, through tools or hosted services on their websites), we act as a data processor under their instructions in accordance with a Data Processing Agreement.

We respect and value the privacy of everyone who visits our websites ('Our Sites') and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of this Privacy Policy is deemed to occur upon your first use of Our Sites. If you do not accept and agree with this Privacy Policy, you must stop using Our Sites immediately.

1. Information About Us

Our Site is owned and operated by ValPal Ltd, a limited company registered in England (Company No. 10731745).
Registered address: Ground Floor, 1/7 Station Road, Crawley, West Sussex, RH10 1HT.
Trading address: Angels House, 5 Albemarle Road, Beckenham, Kent, BR3 5HZ.
VAT Number: 479156450
ICO Registration Number: ZB836750
Data Protection Officer: Patsy Gown (contact details below).

2. What Does This Policy Cover?

This Privacy Policy applies only to your use of Our Sites, which may contain links to other websites. We are not responsible for how your data is collected, stored, or used by other websites and advise checking their privacy policies before providing data.

3. What is Personal Data?

Personal data means any information relating to an identifiable individual. This includes information such as your name, contact details, IP address, and online identifiers.

4. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:
- The right to be informed about how we use your personal data.
- The right of access to the personal data we hold about you.
- The right to rectification of inaccurate data.
- The right to erasure (the 'right to be forgotten').
- The right to restrict or object to processing.
- The right to data portability.

If you wish to exercise any of these rights, please contact our DPO. We may request proof of identity before processing your request.

You can learn more about your rights at the Information Commissioner's Office (ICO): https://ico.org.uk/your-data-matters/.

5. Data We Collect

Depending on how you use Our Sites, we may collect:
- Name, email address, telephone number, business name, job title
- Postcode and contact preferences
- Information about your interests and engagement with our services
- IP address, browser type, and operating system.

6. How We Use Your Personal Data

We use your data to:
- Provide and manage your account
- Deliver our products and services
- Communicate with you (including responding to enquiries)
- Send you marketing communications about ValPal or our partners (you can opt out at any time)
- Analyse site usage to improve user experience

We rely on the following lawful bases for processing:
- Performance of a contract – when providing our services to you
- Legitimate interests – for internal administration, analytics, and B2B marketing
- Consent – for optional communications or data sharing
- Legal obligations – for accounting, compliance, or regulatory purposes

As a B2B organisation, our marketing communications are directed at business contacts and comply with the Privacy and Electronic Communications Regulations (PECR).

7. Data Retention

We keep your data only for as long as necessary:
- Client and transaction data – for up to 3 years after your last interaction, for legal and accounting purposes.
- Marketing data – until you withdraw consent or opt out (after which we retain only your contact record to prevent future marketing).

8. Data Storage and Transfers

We store data securely on cloud-based servers, which may be located outside the UK. When transferring data internationally, we ensure safeguards are in place under the UK GDPR, including:
- UK adequacy regulations (for approved countries), or
- Standard Contractual Clauses with the UK International Data Transfer Addendum.

Where data is transferred to the United States, we use providers certified under the EU–US Data Privacy Framework or equivalent safeguards.

All data is protected using SSL encryption, secure servers, password protection, and encrypted backups.

9. Sharing of Personal Data

We may share limited personal data with:
- Email service providers (for communications)
- CRM and hosting providers (for service delivery)
- Subcontractors or partners acting under our direction

All third parties are required to maintain confidentiality and comply with data protection law. We will never sell your data.

We may also disclose information if required by law or regulatory authorities.

10. Cookies

Our Sites use cookies to improve functionality and analyse site performance. Some cookies are essential, while others (such as analytics or marketing cookies) require your consent.

You can manage or withdraw consent at any time via our Cookie Policy or your browser settings.

11. Accessing Your Data

You can request a copy of the personal data we hold about you ('subject access request') by writing to us at the contact details below. We aim to respond within one month.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or wish to exercise your rights:

Email: team@valpal.co.uk
Post: The Data Protection Officer, ValPal Ltd, Angels House, 5 Albemarle Road, Beckenham, Kent, BR3 5HZ

Please mark correspondence 'Privacy Policy Enquiry'.

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in law or our business practices. The latest version will always be available on our website.

Last updated: November 2025.