GotAClaim Privacy Policy

1. Introduction

GotAClaim ("we", "our", "us") is the trading name of Gotaclaim Ltd, a company registered in the UK (Company No. 16978663), whose registered office is at 128 City Road, London, United Kingdom, EC1V 2NX.

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

For data-protection purposes, Gotaclaim Ltd is the data controller under the EU General Data Protection Regulation (EU GDPR) and, where applicable to UK users, the UK GDPR and Data Protection Act 2018.

You can contact our Data Protection Lead at [email protected].

2. Information We Collect

Personal Data you provide

• Name, postal address, email address, and telephone number
• Claim details and factual descriptions entered into the Platform
• Payment details (handled by Stripe Payments UK Ltd; we do not store card data)
• Communications between you and us (e.g. support emails)
• Account credentials and preferences

Technical and Usage Data

• IP address, browser type, and device information
• Operating system and referrer URL
• Usage logs and analytics data (via Supabase and PostHog)
• Cookies and similar technologies (see Cookie Policy)

3. How We Use Your Information

We use your information to:

• Provide and operate our self-service legal-automation platform
• Generate and deliver documents you request
• Facilitate payments through Stripe Connect
• Communicate with you regarding your account or claims
• Maintain platform security and prevent fraud
• Comply with our legal and tax obligations
• Send service updates or marketing emails (where you have consented)

We do not use claim data to provide legal advice or automated decisions about legal outcomes.

4. Legal Bases for Processing

We process personal data on the following bases:

• Contract performance: to deliver the services you request
• Legitimate interests: to improve the Platform and protect against fraud
• Legal obligation: to comply with tax and record-keeping requirements
• Consent: for marketing emails and non-essential cookies

You may withdraw consent at any time by emailing [email protected] or using the unsubscribe link in our emails.

5. Sharing Your Information

We may share personal data with:

• Payment processor: Stripe Payments UK Ltd (FCA-authorised)
• Hosting and database providers: Supabase Inc. (EU datacentres)
• Email delivery service: Resend Inc.
• Analytics: PostHog Ltd (UK/EU servers)
• Professional advisers (lawyers, accountants, auditors) where necessary
• Regulatory or law-enforcement authorities where legally required

We do not sell or rent personal data to third parties.

6. International Data Transfers

Because we use cloud-based services, data may be processed outside the EEA or UK. Where this occurs, we rely on adequacy decisions or EU Standard Contractual Clauses and UK Addenda to ensure an equivalent level of protection.

7. Data Security

We employ technical and organisational measures including:

• Encryption of data in transit and at rest
• Role-based access controls and audit logging
• Regular security testing and back-ups

Despite our efforts, no system is 100% secure. You acknowledge that internet transmission is never completely risk-free.

8. Data Retention

We retain personal data for as long as necessary to:

• provide services and support
• comply with legal and tax obligations
• resolve disputes

Claim and payment records are typically kept for 7 years from closure, after which they are securely deleted or anonymised.

9. Your Data Protection Rights

Under the EU and UK GDPR you have the right to:

• access your data
• rectify inaccuracies
• erase data ("right to be forgotten")
• restrict processing
• data portability
• object to processing on legitimate-interest grounds

Requests should be sent to [email protected]. We will respond within one month.

If you are in the UK, you may complain to the Information Commissioner's Office (ICO). If you are in the EU, you may complain to the Irish Data Protection Commission (DPC) or your local supervisory authority.

10. Cookies and Analytics

We use cookies to enable essential functionality and to analyse how users interact with our site. Non-essential cookies are used only with your consent. Full details are available in our Cookie Policy.

11. Marketing Communications

With your consent, we may send you emails about new features or updates. You can opt out at any time by clicking the unsubscribe link in the email or contacting us at [email protected].

12. Children's Data

Our services are intended for adults (18+) only. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified by email or on our website, and the "last updated" date will be revised. Continued use of the Platform after changes means you accept the updated policy.

14. Contact Us

Data Controller: Gotaclaim Ltd (trading as GotAClaim)

Email: [email protected]

If you believe we have not handled your personal data properly, you may contact:

• Data Protection Commission (Ireland) – www.dataprotection.ie
• Information Commissioner's Office (UK) – www.ico.org.uk