Data Protection Policy

At ukmarketentry (“we”, “us”, “our”), we are committed to protecting the privacy and security of your personal data. This Data Protection Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We act as the data controller in respect of all personal data we process about you.

1. Scope and Application

This policy applies to all personal data collected through our website, https://ukmarketentry.com, and our related services, including UK market entry consultancy, company formation, regulatory compliance support, and business advisory services. It applies to all users of our website, including visitors, clients, partners, and individuals who contact us with enquiries.

This policy should be read alongside our Privacy Policy and Cookie Policy, which provide additional detail on specific aspects of our data processing activities.

2. Data We Collect

We may collect the following categories of personal data:

Personally Identifiable Information (PII): Your name, email address, telephone number, job title, and company name, provided when you complete forms, submit enquiries, or register for our services.
Business Information: Details about your proposed business activities in the United Kingdom, including company formation requirements, regulatory compliance needs, and market entry objectives, provided via our AI Market Entry Planner or consultation requests.
Technical Data: IP address, browser type, device information, and website usage patterns collected automatically via cookies and similar tracking technologies (see our Cookie Policy).
Communications Data: Records of correspondence if you contact us by email, telephone, or through our website, including any queries or feedback you provide.

3. Purpose of Collection and Lawful Basis

Under the UK GDPR, we are required to identify a lawful basis for each purpose for which we process your personal data. We use your data for the following specific, lawful purposes:

To provide our UK market entry, company formation, regulatory compliance, and business advisory services to you (lawful basis: performance of a contract, or steps taken at your request prior to entering into a contract).
To generate personalised UK market entry plans and business roadmaps via our AI Planner tool (lawful basis: performance of a contract or legitimate interests).
To respond to your enquiries and communicate with you regarding your service requests and updates (lawful basis: legitimate interests or performance of a contract).
To send you marketing communications about our services, events, and resources, where you have provided consent or where we have a legitimate interest to do so and you have not opted out (lawful basis: consent or legitimate interests).
To comply with our legal obligations under UK law, including applicable tax, accounting, Companies House reporting, and regulatory requirements (lawful basis: legal obligation).
To improve the performance, content, and user experience of our website and services through analytics (lawful basis: legitimate interests).

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your data only in the following limited circumstances:

Service Providers & Data Processors: Trusted third-party vendors (such as cloud infrastructure, CRM, and email service providers) who assist in delivering our services. All processors are required to handle your data only on our instructions and in accordance with the UK GDPR, and are bound by appropriate data processing agreements.
UK Government Authorities: Where required by UK law or regulation as part of your business setup processes, including disclosure to Companies House, HM Revenue & Customs (HMRC), or other regulatory bodies.
Professional & Partner Network: Where you have engaged our referral or introduction services, relevant information may be shared with members of our UK partner network, including solicitors, accountants, and company formation agents, strictly for the purpose of delivering the requested service.
Legal & Regulatory Disclosure: Where required by law, court order, or to comply with a legal obligation, or to protect the rights, property, or safety of ukmarketentry, our clients, or others.
International Transfers: Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place as required by the UK GDPR, such as UK-approved standard contractual clauses or transfers to countries with an adequacy decision from the UK Secretary of State.

5. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. When determining appropriate retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.

Where data is no longer required, it is securely deleted or anonymised in accordance with our data retention procedures.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, role-based access controls, regular security assessments, and staff training on data protection obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, as required by the UK GDPR, and will inform affected individuals where required.

7. Your Rights Under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

Right to be Informed: You have the right to be informed about how we collect and use your personal data. This policy, together with our Privacy Policy, fulfils this obligation.
Right of Access: You have the right to request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one month of receiving your request.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you without undue delay.
Right to Erasure (“Right to be Forgotten”): You have the right to request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based.
Right to Restrict Processing: You have the right to request that we restrict processing of your personal data in certain circumstances, for example where you contest its accuracy or object to our processing.
Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit it to another controller where technically feasible.
Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis. You may also object to processing for direct marketing purposes at any time, without the need to provide justification.
Rights in Relation to Automated Decision-Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you, unless certain conditions apply.

To exercise any of the above rights, please contact us using the details in section 8 below. You will not be charged a fee unless your request is manifestly unfounded or excessive. We will respond within one month, with the possibility of extending this period by a further two months for complex or multiple requests.

If you are not satisfied with how we have handled your personal data or with our response to your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

ICO website: ico.org.uk
ICO helpline: 0303 123 1113

We would, however, welcome the opportunity to address your concerns directly before you contact the ICO.

8. Contact Us

If you have any questions about this Data Protection Policy, wish to exercise your rights under the UK GDPR, or have concerns about how we handle your personal data, please contact us:

ukmarketentry
71–75 Shelton Street, London WC2H 9JQ, United Kingdom

Email: info@ukmarketentry.com

We aim to handle all data protection queries promptly and within the timeframes required by the UK GDPR. If you remain dissatisfied with our response, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk.

Last updated: June 2025