Privacy Policy

Bespoke Champions League Ltd is the data controller for personal data processed through FirmVerdict (company no. 16778449, registered office 39 Paxford Road, Wembley, England, HA0 3RQ). This notice explains what we collect and your rights under the UK GDPR and the Data Protection Act 2018.

What we collect

• Account data: email address, sign-in provider (email, Google or Lovable) and plan.
• Usage data: companies you open and save, and daily usage counts used to apply plan limits.
• Technical data: IP address, browser and error logs needed to run and secure the service.
• Payment data: if you subscribe, payments are handled by Paddle.com, our Merchant of Record; we do not store card numbers.
• Public register data: company records from Companies House may include names of directors and officers. We display this as published on the public register.

Why and lawful basis

• Providing your account and subscription — contract.
• Enforcing limits, security and fraud prevention — legitimate interests.
• Displaying public register information — legitimate interests in corporate transparency.
• Tax and accounting records — legal obligation.
• Optional marketing emails — consent, which you can withdraw at any time.

Who we share with

Hosting, database and authentication providers; AI processing providers used to read filed PDF accounts (company filings only, not your personal data); and Paddle.com (Merchant of Record) for the sale of subscriptions, payments, tax compliance and invoicing; professional advisers; and authorities where required by law. We do not sell personal data. Where data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement/Addendum.

Retention

Account data is kept while your account is open and deleted within 30 days of closure, except records we must keep for tax purposes (6 years). Usage logs are kept for up to 12 months.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing, by emailing privacy@bespea.com. We respond within one month. If you are unhappy, you may complain to the Information Commissioner's Office at ico.org.uk.

Security

Data is encrypted in transit, access is restricted by row-level permissions, and plan limits are enforced on our servers.