Ingot Portal

Privacy Policy

Effective: 24 August 2026

1. Introduction

This is the privacy policy of Ingot Portal Limited (“Ingot Portal”, “us” or “we”), which applies to all personal data we process. Privacy policies are also sometimes referred to as ‘privacy notices’ or ‘fair processing notices’.

We are committed to protecting and respecting your privacy. This policy explains the types of personal data we collect, how we use that information, who we share it with, how we protect that information, and your legal rights in relation to your personal data.

This policy is provided in a layered format so you can click through to the specific areas set out below. Alternatively, you can download a PDF version of the policy.

2. About this policy

This policy governs the collection and use of personal data by Ingot Portal. This includes any personal data you may provide as part of any contract you enter into with us, any personal data you provide (or is available to us) through your use of our portal and which we may obtain from other sources.

When we refer to personal data in this policy, this means any information about an individual from which that person can be identified. More detail about this is set out in section 6.

It is important that you read this policy together with any other privacy notice (or ‘fair processing’ notice) we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This policy supplements any such other notices and is not intended to override them.

We have appointed a Data Protection Officer who is responsible for overseeing questions in relation to this policy. If you have any questions about this policy, including any requests to exercise your legal rights, please contact the Data Protection Officer using the contact details set out at the bottom of this policy.

This version of the privacy policy is effective as of 24 August 2026.

3. Who we are

For the purpose of applicable data protection laws, the controller of your personal data is Ingot Portal Limited, whose registered office is at 604 & 605 Cotton Exchange, Bixteth Street, Liverpool L3 9LQ.

We are registered in England and Wales under company number 06054864. For more information about Ingot Portal please see www.ingotportal.com.

4. Keeping your information up to date

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes at any time, by contacting the Data Protection Officer using the contact details set out at the bottom of this policy.

5. Changes to this policy

We reserve the right to amend this policy at our sole discretion, without prior notice to you. We will notify you of any such changes (including when they will take effect). Your continued use of our services or our portal following the posting of changes to these terms means that you consent to those changes (but this does not affect your rights set out in section 14).

6. Information covered by this policy

This policy covers all personal data collected and used by Ingot Portal. In this policy “personal data” means information that (either in isolation or in combination with other information held by us) enables you to be identified as an individual or recognised directly or indirectly. This may include information such as your name, title, date of birth, gender, postal address, email address(es), telephone number(s) and computer IP address.

The different types of data we may collect are referred to below:

  • Identity Data — which may include your first name, surname and title.
  • Contact Data — which may include your home or business address, email address(es), website address, telephone number(s) and fax numbers.
  • Contractual Data — which may include details of the existence of (and the terms and conditions applicable to) any contract we have with you and details about the services we have contracted to provide to you.
  • Employment Data — includes details of your job, your position or job title and where you work (including your company details).
  • Financial Data — which may include your bank account details, any applicable VAT number, details of your income and any applicable business turnover.
  • Technical Data — which may include your internet protocol (IP) address, internet browser type and version, operating system and device, platform and other technology used to access our portal.
  • Usage Data — which may include information about how you use our portal and services.
  • Marketing Data — which may include your preferences in receiving marketing information from us and your communication preferences.

7. Collection of personal data

We may collect personal data about you from different sources detailed below.

Information you give us: Unless expressly stated below, you are not bound by any contractual or statutory obligation to provide personal data to us. However, if you choose to enter into a contract with us (including for the purposes of accessing our portal) then we will need certain information for the purposes of entering into and performing that contract.

When you access our website, when you submit one of our online forms (for example, the contact form or the ‘request a demo’ form), when you correspond with us by phone or email or other electronic means and when you enter into a contract with us or order our services, you may give us information about yourself. The information you give us may include your name, any applicable business name, postal address, email address, telephone number(s), details of your employment status, income and finances and/or other personal data referred to in this policy. This includes personal data you provide when you:

  • enquire about our services using the contact form or the ‘request a demo’ form on our website;
  • enter into a contract with us to provide our services;
  • ask us for details of third-party services that we may promote from time to time;
  • subscribe to our publications;
  • request marketing to be sent to you;
  • enter a competition, promotion or survey; or
  • give us some feedback.

Our online forms are protected by Google reCAPTCHA v3, which collects limited technical information (including your IP address and browser information) to help us prevent automated or spam submissions.

Information we collect about you: With regard to each of your visits to our website, we may also use cookies and other similar technologies to automatically collect technical information, including your internet protocol (IP) address, internet browser type and version, time zone settings, operating system and platform and other technology used to access our website. Where you have accepted analytics cookies, we use Google Analytics 4 to collect information about your visit, including the pages you visit, how long you spend on each page, how you arrived at our site and what you click on while you are here.

We collect the above information by using cookies, server logs and other similar technologies on our website. For detailed information on the cookies we use and the purposes for which we use them, please see our cookie policy.

Information we receive and collect from other sources: We may obtain certain information about you from third party service providers, from government organisations or publicly available sources. The different kinds of personal data about you which we may collect and process from third parties are: Identity Data, Contact Data, Employment Data and Financial Data from credit insurers and other credit reference agencies we use; Technical Data and Usage Data from analytics providers (such as Google), search information providers and social media providers; and Identity Data, Contact Data, Employment Data and Financial Data from government organisations or publicly available sources such as Companies House, HMRC, electoral registers and social media providers.

We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Such aggregated data may be derived from your personal data but is not considered personal data in law. We do not collect any sensitive personal information (which the law refers to as ‘Special Categories of Personal Data’).

8. How we use your personal data

We will only use your personal data when the law allows us to. Each basis on which we are lawfully permitted to process your personal data is known as the ‘legal basis’ for processing.

The purposes for which we may use your personal data, and the types of legal basis that we will rely on, include:

  • To register you as a new customer — using Identity Data, Contact Data, Financial Data, and Employment Data. Legal basis: performance of a contract or taking steps at your request before entering into a contract.
  • To undertake credit checks — using Identity Data, Contact Data, Financial Data, and Employment Data. Legal basis: your consent, or necessary for the performance of a contract.
  • To administer and perform any services you have ordered — using Identity Data, Contact Data, Employment Data, and Contractual Data. Legal basis: your consent, or necessary for the performance of a contract.
  • To manage our relationship with you — including administration of your contract, notifying you about changes to our terms or privacy policy, and dealing with your enquiries or complaints. Legal basis: performance of a contract, legitimate interests, or compliance with a legal obligation.
  • To administer and protect our business and our portal — including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data. Legal basis: legitimate interests or compliance with a legal obligation.
  • To use data analytics (Google Analytics 4) to improve our website — using Technical Data and Usage Data. Legal basis: your consent where you have accepted analytics cookies, otherwise legitimate interests.
  • To make suggestions and recommendations to you — about goods or services that may be of interest to you. Legal basis: your consent, or legitimate interests.
  • To comply with legal requirements — including where you exercise any of your rights, to exercise our legal rights and to bring or defend legal claims. Legal basis: compliance with a legal obligation or legitimate interests.

We will only use your personal data for the purposes shown above. If we need to use your personal data for a different purpose, we will update this policy and notify you of the change before starting any such new processing.

9. Transfers of personal data

We may have to share your personal data with third parties including: any member of our group of companies; service providers who provide haulage, shipping, freight, customs, accounting and other services in connection with the services we provide to you; service providers who provide us with IT, hosting, market research, marketing, advertising, communications, training, payment processing and data cleansing services; credit reference agencies or credit insurers; professional advisers including lawyers, bankers, accountants, auditors and insurers; HM Revenue & Customs and other government authorities; and the police and fraud prevention agencies.

We may also disclose your personal data to third parties in the event that we sell or buy any business or assets, or if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, to enforce our contracts, or to protect our rights, property or safety.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. Please note that some of the third parties we share your personal data with are based outside the United Kingdom (UK), so their processing of your personal data will involve a transfer of data outside the UK. Please see section 10 about data being processed outside of the UK.

10. Where we store your data

Usually your personal data will be stored in the United Kingdom (UK). However, some of our external third-party service providers are based outside the UK, so your personal data may be transferred to a destination outside of the UK. This means it may also be stored and processed at a destination outside of the UK, including by staff operating outside the UK who work for one of our service providers.

Whenever we transfer your personal data to our service providers outside of the UK, we ensure a similar degree of protection is afforded to it as applies within the UK, by ensuring that certain minimum legal safeguards are met or implemented. We take all steps that are mandatory or reasonably necessary to ensure that your personal data is treated securely and in accordance with applicable data protection laws.

11. How long we store your data for

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, you can ask us to delete your data. Please see section 14 regarding ‘Your Rights’ for further information.

12. Security of your personal data

We use administrative, technical, and physical measures to safeguard personal data against loss, theft and unauthorised uses, access or modifications. Our staff and our third-party service providers are under a duty to process your personal data only in accordance with our instructions and they are subject to a duty of confidentiality regarding your personal data.

Where we have given you (or where you have chosen) a password to use to access our portal, you are responsible for keeping this password confidential. We ask you not to share your password(s) with anyone.

We have put in place procedures to deal with any suspected personal data breach. We will notify you and any applicable regulator of any breach where we are legally required to do so.

13. Third party websites and apps

Our portal may contain links to and from third party websites and we may provide you with details of apps provided by third parties. Please note that if you follow a link to any of these websites or download an app, these websites and apps will have their own terms of use and privacy policies and that we do not accept any responsibility or liability for these policies. Please check these terms and policies before you submit any personal data to these websites or apps.

14. Your rights

You have the following rights with respect to the personal data that we hold about you. To exercise any of these rights, you should contact us by using the contact details set out at the bottom of this policy.

You will not normally have to pay a fee to exercise any of these rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may need to request specific information from you to help us confirm your identity when you seek to exercise any of your rights.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

  • Right of access — you can request a copy of the personal data we hold about you and information on the purposes of data processing.
  • Right to correction — you can ask us to correct any inaccurate or incomplete data we hold about you.
  • Right to erasure — you can ask us to delete or remove your personal data where there is no good reason for us continuing to process it.
  • Right to restrict processing — you may ask us to suspend the processing of your personal data in certain circumstances.
  • Right to object — you have the right to ask us to stop processing your personal data for direct marketing, or where processing is based on legitimate interests and your particular situation warrants objection.
  • Right to data portability — where we process personal data by automated means with your consent or for contract performance, you have the right to receive that data in a structured, commonly used and machine-readable format.

Where we are relying on your consent to process your personal data, you may withdraw consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

15. Contacting us

If you have any questions about this policy, or if you wish to exercise your rights as referred to in this policy, please contact us by:

  • Email: lynsey.morrison@ingotportal.com
  • Post: Lynsey Morrison, Data Protection Officer, Ingot Portal Limited, Suite 604 & 605, Cotton Exchange Building, Old Hall Street, Liverpool L3 9LQ