Privacy Policy

1. Who we are

Neptunes Tech Ltd (“we”, “us”) is the data controller for the personal data described in this policy. Our registered address is 61 Bridge Street, Kington, Herefordshire, HR5 3DJ, United Kingdom. You can reach us at [email protected].

2. What data we collect

• Identity data. Full name, date of birth, nationality, passport or national ID details, and photographs of those documents.
• Contact data. Email address, phone number, residential address and country of residence.
• Business data. Proposed or existing company names and numbers, share structure, business description, website, and expected transaction volumes.
• Transaction data. The services you buy and payment confirmations. Card details are handled by our payment processor and never stored by us.
• Technical data. IP address, browser type and pages visited, where analytics are enabled.

3. Why we use it, and our legal basis

• To perform our contract with you. Filing your incorporation with Companies House and preparing payment platform applications.
• To comply with legal obligations. Anti-money-laundering and know-your-customer checks, and record keeping required of company formation services.
• Legitimate interests. Answering your enquiries, improving our services, preventing fraud and keeping our records accurate.
• Consent. Where you opt in to marketing emails. You can withdraw consent at any time.

4. Who we share it with

We share personal data only where necessary, with:

• Companies House, as part of filing your incorporation (some of this becomes public record)
• HMRC, where a filing or registration requires it
• PayPal, Wise and Stripe, where you have asked us to prepare an account application
• Our identity verification, hosting, email and payment providers, acting as processors under contract
• Professional advisers, and regulators or law enforcement where legally required

We never sell your personal data, and we do not share it with advertisers.

5. What becomes public

UK company law requires certain details to appear on the public Companies House register: your name as director and as a person with significant control, your month and year of birth, your nationality, and the company’s registered office address. Your full date of birth and residential address are supplied to Companies House but are not published where a service address is used.

6. International transfers

Some of our providers process data outside the UK and EEA. Where that happens we rely on UK adequacy regulations or on standard contractual clauses with appropriate safeguards.

7. How long we keep it

We retain identity and transaction records for a minimum of five years after our relationship ends, as required by anti-money-laundering regulations, and for up to seven years where tax and accounting rules apply. Enquiry data that does not become a client relationship is deleted within 24 months.

8. Security

Data is transmitted over TLS and stored on access-controlled systems. Identity documents are collected through secure, expiring upload links, never through an ordinary web form or an unencrypted email attachment. Access is limited to staff who need it to perform your work.

9. Your rights

Under UK GDPR you have the right to access your data, correct inaccurate data, request erasure, restrict or object to processing, request portability, and withdraw consent. To exercise any of these, email [email protected]. We respond within one month.

Some rights are limited where we must retain data by law. For example, we cannot erase records required for anti-money-laundering compliance, and we cannot remove information already published on the Companies House register.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.

10. Cookies and advertising measurement

We use strictly necessary cookies to run the site. Beyond those, the only thing we set is the Meta (Facebook) pixel, and only if you press Accept on the banner. Nothing is loaded from Meta and no advertising cookie is set before you do. Declining changes nothing about how the site works for you.

If you accept, the pixel tells Meta which pages you viewed and whether you started or completed an order, so we can tell which adverts actually bring people here. We also send the same events from our own server, which lets Meta match a purchase to an advert even when a browser blocks the pixel. Where those events include your email address, name, phone number or location, they are hashed with SHA-256 before they leave us: Meta receives an irreversible fingerprint used only to match you to an account it already has, never the details themselves. The contents of your documents are never involved.

You can change your mind by clearing this site’s data in your browser, which brings the banner back. Meta’s own use of this data is governed by its privacy policy, and you can limit it in your Facebook and Instagram ad settings.

11. Changes to this policy

We update this policy when our practices change. The date at the top shows the current version, and material changes are notified to active clients by email.