1. Scope
This Privacy Policy explains how GentelBot ("we", "us") processes personal data when you visit gentelbot.co.uk (the "Website") or submit a registration through the form. We process data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
2. What data we process
Information from the form: first name, surname, email address, mobile number and the country linked to that number.
Technical data collected automatically:
- IP address and the country derived from it;
- browser, device, operating system and language setting;
- pages visited, referring website, and date and time of your visit;
- campaign and attribution parameters of the link used (such as click or sub-IDs).
Some of this data is collected through cookies — see our Cookie Notice.
3. Why we use it
- to handle your registration and contact you by phone or email;
- to pass your request to partner providers of financial services;
- to pre-select your country in the phone field;
- to measure the reach of the Website and our campaigns;
- to prevent misuse, fraud and duplicate registrations;
- to meet legal obligations.
4. Lawful bases
We rely on your consent (Article 6(1)(a) UK GDPR), on steps taken before entering into a contract (Article 6(1)(b)), on legal obligations (Article 6(1)(c)) and on our legitimate interests in running a secure and functional website (Article 6(1)(f)). Non-essential cookies are only used with your consent, as required by PECR.
5. Who receives data
We do not sell your data. Recipients may include partner providers who contact you about their services; technical service providers for hosting, lead management, IP geolocation and statistics; advertising partners such as Meta where measurement pixels are active; and public authorities where we are legally required to share it.
6. International transfers
Some partners and service providers may be based outside the United Kingdom. Where that is the case, we ensure an adequate level of protection, for example through UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.
7. Retention and security
We generally keep registration data for up to 24 months after your last contact with us, unless a longer legal retention period applies. The Website is served only over encrypted connections (HTTPS), and access to data is limited to authorised staff.
8. Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing and to data portability. You may withdraw consent at any time with effect for the future. You also have the right to complain to the Information Commissioner's Office (ICO).
9. Age limit and updates
The Website is intended for adults aged 18 and over only. We update this policy when the law or our processing changes; the date at the top shows the current version.
10. Contact
For questions about data protection, please email [email protected].