top of page

PRIVACY POLICY

Last updated: 26 August 2026

​

1. Who we are

Smallbizbod (“we”, “us”, “our”) collects, holds, and processes information about its customers and website visitors, including personal data that may be used to identify individuals. This policy explains what we collect, why, and what your rights are.

​

2. What personal data we collect

Depending on how you interact with us, this may include:

  • Contact details, such as your name, email address, phone number, and postal address.

  • Information you provide when enquiring about or engaging our services, and details needed to carry out agreed work under a Service Agreement.

  • For engagements covered by Anti-Money Laundering Regulations, identity and address verification documents collected as part of Customer Due Diligence.

​

3. Why we collect it, and our legal basis

We only use personal data where we have a lawful basis to do so under UK GDPR:

  • To deliver the services you've asked for and manage our contract with you: this is necessary for the performance of a contract.

  • To carry out Customer Due Diligence under Anti-Money Laundering Regulations: this is necessary to comply with a legal obligation we're subject to.

  • To keep records for accounting, tax, insurance, and regulatory purposes, and to share information with insurers, bankers, or professional advisers where necessary: this is necessary for our legitimate interests in running the business responsibly, and in some cases to comply with a legal obligation.

  • Where none of the above applies, we'll ask for your consent before using your data, and you can withdraw that consent at any time.

 

4. How long we keep it

We do not retain information about our customers for longer than is necessary. As a general rule, we keep records for a minimum of 6 years and a maximum of 10 years from the end of any business arrangement, in line with our regulatory and legal record-keeping obligations.

 

5. Who we share it with

We may share personal data with insurers, bankers, legal advisers, and other professional advisers where necessary for the purposes described above, or disclose it at your own request. We do not sell personal data to third parties.

 

6. Your rights

Under UK GDPR, you have the right to:

  • Request access to the personal data we hold about you.

  • Request correction of inaccurate or incomplete data.

  • Request erasure of your data, where it's no longer needed or you withdraw consent.

  • Request that we restrict or stop processing your data in certain circumstances.

  • Object to processing based on legitimate interests.

  • Request a copy of your data in a portable format, where technically feasible.

  • Complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

You will not normally be charged a fee to exercise these rights. We may charge a reasonable administrative fee, or decline to act, if a request is manifestly unfounded, excessive, or repetitive.

 

7. Contact us

To exercise any of these rights, or if you have questions about this policy, contact our Data Protection Officer, Sarah Ingleby, at info@smallbizbod.com or 01332 492568.

Smallbizbod is registered with the Information Commissioner's Office, registration number ZA806978.

 

8. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. Any changes will be posted on this page with a new “last updated” date.

bottom of page