Privacy policy

How iridescent-shore handles personal data

This policy explains how we collect, use, and protect personal data when you contact us or use our services. We operate in the United Kingdom and follow applicable UK data protection law.

Information we collect

We collect information that helps us provide benefit support and respond to enquiries. This may include:

Contact details

Name, email address, and preferred method of contact.

Case information

Benefit type, deadlines, and relevant documents.

Service history

Records of support provided and communications.

How we use your data

We use personal data to assess service needs, prepare documentation, and communicate updates. We do not sell personal data or use it for unrelated marketing without consent.

Service delivery

To provide benefit support and case coordination.

Client care

To respond to enquiries and maintain service records.

Quality improvement

To review how our guidance and tools perform.

Legal bases for processing

We process personal data under lawful bases including contract performance, legitimate interests, and consent where required.

Contract

To deliver the services you request.

Legitimate interests

To improve services and keep records of support provided.

Consent

For optional communications or non-essential cookies.

Sharing and retention

We only share information with trusted partners when necessary to deliver services or comply with legal obligations. We retain data only as long as required to support your case and meet regulatory requirements.

Retention overview

Case files are retained for up to seven years to align with typical advisory record-keeping requirements.

Security measures

We use access controls, secure storage, and regular reviews to protect sensitive information.

Your rights

You have the right to access, correct, or delete your personal data, and to object to certain processing. Requests can be made by email.

Access and correction

Request a copy or update inaccurate information.

Restriction and objection

Limit processing or object to certain uses.

Data deletion

Request deletion where no legal obligation applies.

Contact us at [email protected] for privacy requests.