Privacy Notice

1. Introduction

Wysehub Ltd ("Wysehub", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store, and share your personal data, and sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this notice carefully. It applies to personal data we process in connection with the services we provide, including services delivered via our platform and in partnership with claims management companies and other third parties.

2. Who We Are

Wysehub Ltd is the data controller in respect of the personal data it processes. We are registered with the Information Commissioner's Office (ICO) in the United Kingdom.

Registered address: 167-169 Great Portland Street, London, England, W1W 5PF
ICO registration number: 15820659
Data Protection contact: contact@wysehub.co.uk

3. What Personal Data We Collect

Depending on how you interact with us or the services we provide on your behalf, we may collect and process the following categories of personal data:

Identity and contact data
- Full name, date of birth, and National Insurance number
- Home address, email address, and telephone number
- Proof of identity documents (e.g. passport, driving licence)
Financial data
- Bank account details and transaction history
- Details of financial products held (e.g. loans, insurance policies, packaged bank accounts)
- Correspondence with financial institutions
Sensitive / special category data
- In some cases, the claims process may require us to process special category data, such as health information, where this is relevant to your claim. We will only process such data where we have a valid lawful basis to do so, including your explicit consent where required.
Usage and technical data
- IP address, browser type, and device information
- Pages visited on our website and interaction data
- Cookie data (see Section 10)

4. How We Collect Your Data

We collect personal data through the following means:

Directly from you when you register for or use our services, complete forms, or communicate with us
From claims management companies, repair networks, hire providers or other third parties acting on your behalf
From financial institutions or other organisations in connection with your claim
From publicly available sources, including Companies House and the ICO register
Automatically, through cookies and similar tracking technologies when you use our website

5. Why We Process Your Data and Our Legal Basis

We only process personal data where we have a lawful basis to do so under the UK GDPR. The table below sets out the purposes for which we process personal data and the corresponding legal basis:

Purpose	Examples	Legal Basis
Providing our services	Processing claims, managing your account, communicating with financial institutions	Contract / Legitimate interests
Compliance with legal obligations	Regulatory reporting, responding to lawful requests from authorities	Legal obligation
Fraud prevention and security	Identity verification, detecting and preventing financial crime	Legitimate interests / Legal obligation
Improving our services	Analysing how our platform is used, resolving technical issues	Legitimate interests
Marketing (where opted in)	Sending updates about relevant services or products	Consent
Handling complaints and disputes	Investigating complaints, liaising with the Financial Ombudsman Service	Legal obligation / Legitimate interests

6. How We Share Your Data

We may share your personal data with the following categories of recipient where necessary and proportionate:

Claims management companies acting on your behalf
Financial institutions (e.g. banks, lenders, insurers) in connection with your claim
Regulatory bodies and law enforcement agencies where required by law
The Financial Ombudsman Service (FOS) and the Financial Conduct Authority (FCA)
IT service providers, cloud platforms, and other suppliers who process data on our behalf under data processing agreements
Professional advisers including solicitors, accountants, and auditors

We do not sell your personal data to third parties for marketing purposes.

7. International Transfers

Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements. This may include transfers to countries with an adequacy decision, or transfers subject to Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

If you would like further information about international transfers or the safeguards we apply, please contact us using the details in Section 12.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law or regulation. In general:

Client and claims data is retained for 6 years following the conclusion of the relevant matter, in line with the Limitation Act 1980
Financial records are retained for 6 years in line with HMRC requirements
Employee records are retained for 6 years following the end of employment
Marketing consent records are retained for the duration of the consent plus 1 year

At the end of the applicable retention period, data is securely deleted or anonymised.

9. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your data where there is no compelling reason for us to retain it
Right to restriction of processing — to request that we limit how we use your data in certain circumstances
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing purposes
Rights in relation to automated decision-making — not to be subject to a decision made solely by automated means where it produces a legal or similarly significant effect

To exercise any of these rights, please submit a request in writing to our Data Protection contact (see Section 12). We will respond within one calendar month.

If you are dissatisfied with our handling of your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

10. Cookies

Our website uses cookies and similar technologies to improve your experience and help us understand how our site is used.

Strictly necessary cookies — required for the website to function and cannot be switched off
Performance and analytics cookies — help us understand how visitors use our site
Functional cookies — enable enhanced features and personalisation
Targeting/advertising cookies — used to deliver relevant content (only where consent has been given)

You can manage your cookie preferences through your browser settings or our cookie consent tool.

11. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, services, or legal obligations. The most current version will always be available on our website and will show the "Last Reviewed" date at the top of the document. Where changes are material, we will take reasonable steps to notify you.

12. How to Contact Us

If you have any questions about this Privacy Notice, wish to exercise your data subject rights, or have a concern about how we handle your personal data, please contact us:

Data Protection Contact

Wysehub Ltd
167-169 Great Portland Street, London, England, W1W 5PF
Email: contact@wysehub.co.uk
Telephone: 03338809113

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk