Your information, handled with care

Privacy policy

Last updated: [date]

1. Who is responsible for your data

Wadard Ltd, trading as Heyday, is the data controller. Company number 13155846, registered office Unit 6 Greencroft Works, Kirk Lane, Leeds LS19 7LX. We are registered with the Information Commissioner’s Office (ICO), registration number ZB250307. Contact: hello@example.co.uk.

2. What we collect

To assess and prepare benefit claims we collect: contact details (name, address, phone, email); date of birth and National Insurance number; financial information (income, savings, pensions); and information about your health and daily living needs. Health information is “special category data” and we only process it with your explicit consent. If a family member enquires for you, we collect their contact details too.

3. Why we use it, and our legal grounds

We use your information to check what you may be entitled to, to prepare and submit applications, to communicate with you and any family member you nominate, to take payment, and to keep records of our work. Our legal bases are: performing our contract with you; your explicit consent (for health information — you can withdraw it at any time); our legitimate interests in running the business; and legal obligations (tax and accounting records).

4. Who we share it with

We share your information only as needed to deliver the service: with the Department for Work and Pensions, Social Security Scotland, or your local authority as part of your application; and with the service providers that run our systems (phone, email, document storage and payments), who process it on our instructions. We never sell your information, and we do not use it for third-party marketing.

5. How long we keep it

We keep case records for [6] years after your case closes (to meet tax, insurance and legal requirements), then delete them securely. If you enquire but don’t become a client, we delete your details within [12] months.

6. Your rights

You have the right to see the information we hold about you, to have it corrected or deleted, to limit or object to how we use it, to receive a copy in a portable format, and to withdraw consent at any time. To use any of these rights, contact hello@example.co.uk — we respond within one month. If you’re unhappy with how we handle your data, you can complain to the ICO at ico.org.uk or on 0303 123 1113.

7. Cookies & analytics

Our website uses [no cookies / only essential cookies and privacy-respecting analytics]. If we introduce analytics or marketing cookies we will ask for your consent first and update this policy.

8. Security

Your information is stored on encrypted, access-controlled systems. Paper documents, where unavoidable, are kept locked and returned or shredded. We will report any breach that puts you at risk to you and to the ICO without undue delay.