Items in [SQUARE BRACKETS] are placeholders for genuine company details that must be completed and reviewed before memberships are sold.
1. Who we are
UK Purchase Shield is a trading name of Market Leading Generation Limited, a company registered in [England and Wales] under company number 12056496, with its registered office at 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ.
We are the data controller for the personal information described in this policy. You can contact us about privacy at [PRIVACY EMAIL]. [DATA PROTECTION OFFICER DETAILS, IF APPOINTED]
2. Information we collect
We collect only what we need to provide the service:
- Membership details: name of the account holder and protected member, membership number, plan and start date.
- Contact details: email address, telephone number and postal address.
- Information provided during Purchase Shield calls: details of the company, offer, price, payment request and your concerns.
- Uploaded documents: quotes, letters, contracts or screenshots you choose to share with us.
- Call recordings, if used: [CONFIRM WHETHER CALLS ARE RECORDED]. If we record calls we will tell you at the start of the call.
- Payment information: processed by our payment provider. We do not store full card numbers.
- Website analytics and cookies: device and usage information, only where you have consented to optional cookies.
3. How we use information
- Service delivery: carrying out checks, explaining results by phone and sending written email summaries.
- Managing your membership and billing.
- Customer support: answering questions and handling complaints.
- Fraud and security: protecting our service, members and staff.
- Marketing communications: only where you have agreed, and you can opt out at any time.
- Improving our service and meeting legal obligations.
4. Legal bases for processing
Under UK GDPR we rely on: contract (to provide your membership); legitimate interests (for example security, service improvement and checks requested on behalf of a family member); legal obligation (for example tax and accounting records); and consent (for optional cookies and marketing). [LEGAL REVIEW: CONFIRM BASES AND ANY SPECIAL CATEGORY DATA CONDITIONS.]
6. Data retention
We keep personal information only for as long as needed. Membership records: [PERIOD] after membership ends. Call notes and email summaries: [PERIOD]. Call recordings (if used): [PERIOD]. Financial records: as required by law, typically six years.
7. International data transfers
Where a provider processes data outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement. [LIST PROVIDERS AND LOCATIONS WHERE APPLICABLE.]
8. Information security
We use appropriate technical and organisational measures to protect personal information, including access controls and encryption in transit. Please never share card details, PINs or passwords with us — we will never ask for them.
9. Your rights under UK GDPR
You have the right to:
- Access: ask for a copy of your personal information.
- Correction: ask us to correct inaccurate information.
- Deletion: ask us to delete information in certain circumstances.
- Restriction: ask us to limit how we use your information.
- Objection: object to processing based on legitimate interests or for direct marketing.
- Portability: receive information you provided in a reusable format.
- Withdrawal of consent: where we rely on consent, withdraw it at any time.
To exercise any right, contact [PRIVACY EMAIL]. We will respond within one month.
10. Complaints and the ICO
If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
11. Policy updates
We may update this policy from time to time. We will post the new version here and, where changes are significant, tell members by email.
12. Contact details
Market Leading Generation Limited, 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ. Email: [PRIVACY EMAIL].