Privacy Policy | Desucla

Introduction

Desucla Limited is a company registered in England and Wales (Company No. 12078865) with its registered office at 83 Friar Gate, Derby, Derbyshire, DE1 1FL, United Kingdom.

In this Privacy Policy, “Desucla”, “we”, “us” or “our” refers to Desucla Limited and its controlled subsidiaries.

We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable privacy legislation.

This Privacy Policy explains how we collect, use, store and protect personal data, the legal bases on which we process it, and your rights in relation to that data.

Data Controller and Processor Roles

Desucla acts as a data controller when you engage directly with us for services or when you visit and interact with our website.

Where we provide services through a compliance partner or intermediary with whom you have contracted, that partner may act as the data controller and Desucla may act as a data processor. In those circumstances, processing is carried out strictly in accordance with contractual instructions.

If you are unsure which role applies to your relationship, you may contact us using the details below.

Lawful Basis for Processing

We process personal data on the following legal bases.

Performance of a Contract

Where processing is necessary to:

Register you as a client or service provider
Deliver and administer contracted services
Manage communications and payment processing

Legal Obligation

Where processing is required to:

Comply with tax, financial, AML or regulatory requirements
Respond to lawful requests from public authorities
Maintain required records

Legitimate Interests

Where processing supports our legitimate business interests, including:

Service improvement and operational governance
Fraud prevention and security monitoring
Client communication and service updates
Protection and defence of legal claims

We assess and balance our legitimate interests against your rights before relying on this basis.

How We Collect Personal Data

We collect personal data in the following ways.

Directly from you

When you:

Contact us
Complete forms on our website
Register for services
Attend meetings or events
Provide documentation for compliance purposes

Indirectly

Through:

Public registers (for example Companies House)
Sanctions or regulatory databases
Credit reference agencies
Compliance partners
Automated website technologies, including cookies

Categories of Personal Data

We may process the following categories of personal data:

Identity and contact data (such as name, address, email address, telephone number and identification details where required for compliance)
Financial and transaction data (including payment information, settlement records and tax-related data)
Technical data (including IP address, device information and browser data)
Business information (including corporate details, filing data and compliance documentation)
Employment information where relevant to recruitment or onboarding

Special category data is processed only when required by law or regulation and is subject to appropriate safeguards.

We do not intentionally collect personal data from children.

How We Use Personal Data

We use personal data to:

Deliver filing, settlement and compliance execution services
Manage regulatory and representation obligations
Maintain operational audit trails and governance records
Execute tax payment workflows
Monitor security and prevent fraud
Communicate with clients and partners

We do not sell personal data.

Data Retention

We retain personal data only for as long as necessary to:

Fulfil contractual obligations
Meet legal and regulatory requirements
Defend or establish legal claims

Unless a longer period is required by law or regulation, records are typically retained for seven years following the end of the relevant service relationship.

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

Data Sharing

We may share personal data with:

Regulated banking and payment providers
Fiscal representatives and tax authorities where required
Professional advisers such as auditors, insurers and legal counsel
IT and infrastructure providers operating under contractual controls
Regulatory or law enforcement authorities where legally required

All third-party processors are subject to appropriate contractual safeguards and must process personal data only in accordance with our instructions.

International Transfers

Personal data is primarily stored within the United Kingdom or the European Economic Area (EEA).

Where transfers outside these regions are necessary, they are made subject to appropriate safeguards, including UK-approved Standard Contractual Clauses or equivalent lawful mechanisms.

Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

Role-based access controls
Encrypted data transmission
Secure hosting environments
Audit logging and monitoring
Segregated workflow controls

While we take reasonable steps to protect personal data, transmission over the internet cannot be guaranteed to be completely secure.

Your Rights

Under UK GDPR, you have the right to:

Request access to your personal data
Request correction of inaccurate data
Request erasure, subject to legal obligations
Restrict processing in certain circumstances
Object to processing based on legitimate interests
Withdraw consent where processing relies on consent
Request data portability
Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact:
[email protected]

We may request proof of identity before fulfilling requests.

We aim to respond within one month.

Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices of third parties.

Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be published on our website.

Contact

For privacy queries or complaints, please contact:
[email protected]

You may also contact the Information Commissioner’s Office (ICO):
www.ico.org.uk
Telephone: 0303 123 1113