Legal

Privacy Policy

Last updated: 2 March 2026

1. Who we are

For the purposes of data protection law, Valindexo is the controller of the personal data described in this policy. Our address is King William Street 178, LS1 5AT Leeds, United Kingdom. You can contact us about data matters at [email protected].

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data, such as your name, email address and telephone number;
• Account data, such as login details, preferences and settings;
• Technical data, such as IP address, browser type, device identifiers, approximate location derived from IP, and log information;
• Usage data, such as pages viewed, features used and interactions with calculators or charts;
• Communications data, such as messages you send to our support team.

We do not ask you to provide sensitive special-category data. Please do not include such information in messages to us.

3. How we use your data and our legal bases

We process personal data only where we have a lawful basis to do so:

• Contract, to create and manage your account and provide the services you request;
• Legitimate interests, to secure and improve the Platform, prevent fraud and abuse, and understand how features are used;
• Legal obligation, to meet our accounting, anti-money-laundering and regulatory duties;
• Consent, for marketing communications and for non-essential cookies, which you may withdraw at any time.

4. Cookies and similar technologies

We use essential cookies to operate the Platform and, with your consent where required, analytics and preference cookies. Further details are set out in our cookie information and in the settings available on the Platform. You can control cookies through your browser, although disabling essential cookies may affect how the Platform works.

5. Sharing your data

We do not sell personal data. We may share it with trusted service providers who process data on our behalf, including hosting, analytics, customer support and payment processing providers. These providers are bound by written contracts and may only act on our instructions. We may also disclose data where required by law, by a court order, or to protect our legal rights.

6. International transfers

Some of our providers may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as UK-approved international data transfer agreements or adequacy regulations, in line with UK GDPR requirements.

7. How long we keep your data

We retain personal data only for as long as necessary for the purposes described above. Account data is generally kept for the life of your account and for a limited period afterwards to resolve disputes and meet legal obligations. Records required for tax or regulatory purposes are kept for the periods the law requires. When data is no longer needed, we delete or anonymise it.

8. Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration and disclosure. These include encryption in transit, access controls and staff confidentiality obligations. No system is completely secure, so we also encourage you to use a strong, unique password and to report suspected incidents to us promptly.

9. Your rights

Under UK data protection law you may have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• request erasure in certain circumstances;
• restrict or object to certain processing;
• request portability of data you provided to us;
• withdraw consent at any time, without affecting the lawfulness of earlier processing.

To exercise these rights, contact us using the details above. We may need to verify your identity before responding. We aim to respond within one month, as the law requires.

10. Complaints

If you have concerns about how we handle your data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

11. Children

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or the law. The revised version will be published on this page with an updated "Last updated" date. Where changes are significant, we will take reasonable steps to notify you.