This privacy notice is provided to inform about how and why your personal data is used so that we can be as transparent as possible, and to ensure that you are aware of your rights under data protection legislation. 

The Company

We are entitledto Ltd, our registered address is Delta House, 16 Bridge Road, Haywards Heath, West Sussex, RH16 1UA. We can be contacted for privacy requests at hello@entitledto.co.uk or on 01619806276. Please note, we are sorry but we can't answer questions about your individual benefit entitlements via these contacts.

The purpose for processing your data and our basis for doing so

We process personal data so we can provide our entitlement calculation services to users of our platform as well as engage and communicate with benefits advisors and our organisational clients. We also process personal data to maintain communication and to send information about benefit and product updates as well as undertaking occasional surveys.

When we process your personal data, we must establish our legal basis for doing so and that legal basis can be different depending on the circumstances in which we process it. You will see references to the basis of processing e.g.,"(Article. 6.1.f)" and this is a reference to the article of the UK General Data Protection Regulation under which we undertake the processing in question.

We collect the data you input into our online calculators either as a registered or non-registered user. Information we collect from you is undertaken as a legitimate interest activity (Article 6.1.f UK GDPR). Our legitimate interest is that to provide our entitlement calculation service, create greater access to our benefits calculators and expanding our business. If you register an account, we will process your full name and email address and we also create a unique identity reference. When you access the benefits calculator, you will be asked to provide information about your personal circumstances, some of this information may be considered personal data, some not.

If you access our services as an advisor or we identify you as a contact point for an organisational client, we will also process your organisation’s name and your job title and contact numbers. We process your data under Article 6.1.b UK GDPR – ‘performance of a contract’.

We will continue to process your name and email address for the purposes of updating you on benefits when you register an account. We do this with your consent under Article 6.1.a of the UK GDPR. You can withdraw your consent at any time by contacting us as above. For corporate advisors and organisational clients, we provide information on our products and services as a legitimate interest activity under Article 6.1.f UK GDPR.

If you fail to provide the information required, we will be unable to provide the agreed services to you.

Recipients of your data

We will transfer your data to third parties if we are required to through a legal obligation, or to provide you a referred service for your benefit. For example:

• It is possible that we might be obliged to disclose personal information in response to a court order or other lawful obligation. Our lawful basis for this is Article 6.1.c -legal obligation. 
• As part of our service, we may transfer your data to companies providing energy support services.

Data processed by third parties on our behalf

We use the services of other organisations in the processing of your data. We use cloud-based accounting platforms, email and document storage, video conference platforms, customer relationship management platform and an outsource IT provider. We also use a cloud based ticketing platform for support purposes. Our website processes limited personal data such as through our Contact Us form.

Those organisations that process personal data on our behalf are subject to a data processing contract as required by Article 28 of the UK GPDR. This ensures that your data is handled in accordance with the UK GPDR.

Transferring your data outside of the UK

We do transfer data outside of the UK as some of our cloud platforms are located overseas. If your data is sent out of the UK, we ensure that there are approved mechanisms to do so, such as adequacy decisions under Article 45 UK GDPR, standard contractual clauses under Article 46.2 UK GDPR or in exceptional circumstances, allowable derogations under Article 49 UK GDPR. Currently, we transfer personal data of our client contacts to the USA using our CRM platform and email marketing programme.

Retention periods 

We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. As a registered user, you have the option to retain or delete completed calculations you have conducted. We will retain the personal data of registered users for a period of 90 days after the account has been deactivated. For advisors and clients, we will retain your data for 7 years to comply with financial reporting requirements.

Your rights 

The UK GDPR provides you with several rights in relation to the data we process. The rights relevant to our activities are:

• You have the right to get access to and copies of your personal data.
• You can in certain circumstances, restrict our processing of your data and request us to erase it (although we may have to retain some for legal reasons).
• You can ask us to rectify any inaccurate information we may be holding. 

If you want to exercise any of these rights, please contact us using the above contact details.

You also have the right to lodge a complaint about our processing with a supervisory authority — the UK's Information Commissioner's Office. 

Information Commissioner's Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire 
SK9 5AF 

Telephone: 0303 123 1113 

Website: www.ico.org.uk 

3rd Party Cookies

Like most other websites we use some cookies (small pieces of information that are stored by your internet browser) to improve your experience on our website. Some of the cookies are set to collect information from your browser to show adverts that are relevant to you and not generalised. See the Advertising section below for more information.

We also use Google Analytics to understand, in aggregate, how visitors use the site and to allow us to improve it, which also involves the use of a cookie. 

If this concerns you, you can clear, prevent, delete or enable 3rd-party cookies at any time. The allaboutcookies.org website has details on how to do this in different web browsers.   

Advertising

CAN is responsible for delivering advertising on the entitledto website. Please take a moment to read their privacy policy and find out how to change your privacy preferences. You can also set advert preferences for Google via its adsettings page.