Privacy policy

Stand Up 8 Holdings Ltd is responsible for deciding how personal information is used for The Business Review Co. website and introduction service. In data protection law, this is the role of a controller.

For privacy questions, access or correction requests, or other rights requests, use our Contact us page and select “Privacy or data request”. You do not have to make a business enquiry to contact us about privacy.

• Contact and business details: your name, email, business name and type, and a phone number if you provide one.
• Enquiry information: your message, the service you want, questionnaire answers and any optional sector or postcode information. Depending on the review, answers may concern premises, expenditure, business activities, energy supplies or existing accounting arrangements.
• Correspondence: information you give us when we discuss an enquiry, introduction, complaint or privacy request.
• Technical information: the page used to submit a form, submission time, browser information, and connection or security data processed by website and security providers, such as an IP address.
• Measurement information: visit and interaction data processed through Google Analytics 4 and Tag Manager. With analytics consent, we also keep first and most recent non-direct visit sources, campaign labels, referring page paths and visit dates, which can accompany an enquiry.
• Your choices: cookie preferences and any marketing permission you give or withdraw.

Most enquiry information comes directly from you. We may receive relevant referral information from an adviser acting with your authority, or an update from a specialist about an introduction you have agreed to.

Required form fields are marked. Without those details, we may be unable to respond or arrange the service you request. Optional fields can be left blank. Please do not include sensitive personal information, bank details, tax records or client documents in initial forms. The service is intended for business representatives, not children.

Where UK data protection law applies, we use the following bases:

• Handling enquiries and agreed introductions: our legitimate interests in responding to business requests and providing a relevant introduction service. Where you personally enter a contract with us, or ask us to take steps towards one, the contractual basis may apply instead.
• Running and protecting the service: legitimate interests in maintaining a secure website, preventing spam and misuse, keeping proportionate records and resolving complaints.
• Optional browser storage and associated analytics or advertising: your consent, which you can change in Cookie settings. The Cookie Policy separately explains limited signals Google may send with storage consent denied.
• Limited cookieless measurement: our legitimate interests in understanding overall website and campaign performance, where this processing involves personal information. This does not authorise optional browser storage.
• Optional marketing: your consent where required. An enquiry alone does not sign you up for marketing.
• Legal obligations: where we must retain, use or disclose information to comply with applicable law.

When relying on legitimate interests, we must consider your rights and reasonable expectations. Initial questionnaire results help explain possible next steps; they do not make a solely automated decision with legal or similarly significant effects on you.

People authorised to handle your enquiry may access relevant information. We also use suppliers for hosting, customer relationship management, communications and website security. They receive the information needed for their role.

We agree a specialist introduction with you before sharing your enquiry for that purpose. The specialist is normally a separate controller for their advice and services and should provide their own privacy information. We do not send your enquiry to every firm on a comparison list.

Google receives website measurement data through Google Analytics 4 and Tag Manager. Cloudflare Turnstile processes technical information when the protected Contact form is enabled, to distinguish people from automated traffic. See Google’s Privacy Policy and Cloudflare’s Turnstile Privacy Addendum.

We may also disclose relevant information to professional advisers or public authorities where necessary for legal obligations or legal claims.

Our company is registered in Hong Kong and serves UK businesses. Information may be processed outside the UK, including by global technology providers such as Google and Cloudflare. A provider’s location is not necessarily the location of every server or person who can access information.

Where UK restrictions on international transfers apply, a transfer needs a valid legal mechanism, such as an applicable adequacy regulation or appropriate contractual safeguards with the required assessment. Contact us to ask about the recipients, processing locations and safeguards relevant to your enquiry, or to request a copy of applicable safeguards.

Retention depends on why we hold the information. For an enquiry or introduction, the relevant factors are whether it remains open, whether follow-up is needed, our relationship with you, and any complaint, legal obligation or period for bringing or defending a claim. Information should not be kept once those purposes no longer require it.

Privacy request records may be needed to demonstrate how a request was handled. A minimal record of an objection may be retained so that the objection can continue to be respected. Contact us for the retention criteria applicable to your particular record.

Browser storage has separate limits: we remember cookie choices for 180 days and use a 30-day expiry for visit attribution, refreshed by a qualifying new visit. Google cookie lifetimes and browser controls are explained in our Cookie Policy.

You can object to direct marketing at any time. You can also object to processing based on legitimate interests, including cookieless measurement, on grounds relating to your situation. Use our Contact us page for these requests.

Depending on the law and circumstances, you may also ask to access your information, correct inaccuracies, erase it, restrict its use, or receive a portable copy. Where processing relies on consent, you may withdraw consent at any time; this does not change the lawfulness of earlier processing. Cookie settings are available in the footer.

We may need proportionate information to verify your identity and understand your request. Rights have legal conditions and exceptions; we will explain any that apply. We respond within the period required by applicable law.

Please Contact us if you are concerned about how we handle information. You can also complain to the UK Information Commissioner’s Office or, where relevant, the Hong Kong Privacy Commissioner for Personal Data.

We may update this notice when the service or our practices change. The date at the top shows when it was last revised.