Privacy Policy for SMEBizness Ltd  

Effective Date: 26/11/2025

At SMEBizness Ltd (“we”, “our”, “us”), we value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you interact with our services, including the data you provide through document uploads and other services related to SMEBizness Ltd.

This policy explains:

• The types of personal data we collect.  
• The purposes for which we collect and process your data.  
• Your rights under GDPR.  
• How long we retain your data and when it will be deleted.  
• How we protect your personal data.

1. Information We Collect

We collect the following types of personal data:

• Identity Data: Full name, business name, contact details (email, phone number). 
• Financial Data: Bank account details, payment information (e.g., for Stripe account creation, payment processing, payouts). 
• Documents: Personal identification documents (e.g., passport, driving license), bank statements, business-related documents, and any other relevant files required for identity verification and contract creation.
• Transaction Data: Data related to payments, contracts, and transactions involving our services. 

2. How We Use Your Data

We process your personal data for the following purposes:

• Account Creation and Management: To create and manage your Stripe account for payment processing and payouts. 
• Contractual Obligations: To facilitate relevant business services, including creating contracts for financial services and business support (e.g., broadband, energy, and other business services). 
• Legal Compliance: To comply with regulatory requirements such as Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations. 
• Customer Support: To provide customer support and respond to your inquiries and requests. 
• Business Operations: To improve our services and offer additional relevant services that support your business needs. 

By uploading your documents, you consent to the collection, processing, and storage of your personal data for the purposes listed above.  

3. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds: 

• Contractual Necessity: We need to process your data to fulfill our contract with you (e.g., processing payments, providing services). 
• Legal Obligation: We are required to collect and store certain information for legal and regulatory purposes, such as KYC and AML compliance. 
• Legitimate Interests: We process your data to improve our services, provide customer support, and ensure compliance with applicable laws. 

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Specifically:  

• We will retain your personal data for 1 year from the completion of the service or termination of our business relationship. 
• After this period, your data will either be securely deleted or anonymized in accordance with our Retention Policy. 

If we need to retain your data for longer (e.g., for tax purposes or legal disputes), we will ensure compliance with applicable laws. 

5. Data Security

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, secure storage, and restricted access to your data.  

5. Data Security

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, secure storage, and restricted access to your data.

6. Sharing Your Data

We do not share your personal data with third parties unless necessary to fulfill the purposes outlined in this Privacy Policy or if required by law. We may share your data with:

• Third-Party Service Providers: We may use third-party companies (such as Stripe) to process payments or provide other necessary business services. 
• Regulatory Authorities: In certain cases, we may be required to share your data with government agencies, financial institutions, or other authorities to comply with legal or regulatory requirements. 

We ensure that any third parties we work with have appropriate data protection measures in place. 

7. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR: 

• Right of Access: You can request a copy of the personal data we hold about you. 
• Right to Rectification: You can request that we correct any inaccurate or incomplete data. 
• Right to Erasure: You can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected. 
• Right to Restrict Processing: You can request that we restrict the processing of your data in certain circumstances (e.g., if you contest the accuracy of your data). 
• Right to Object: You can object to the processing of your personal data in certain situations, such as direct marketing. 
• Right to Data Portability: You can request that we provide your data in a structured, commonly used format and transfer it to another organization. 

To exercise any of these rights, please contact us at rushdy.shiham@smebizness.co.uk. 

8. How to Exercise Your Rights

You may exercise your GDPR rights by contacting us at: 

SMEBizness Ltd 
Data Protection Officer: Rushdy Shiham 
Email: rushdy.shiham@smebizness.co.uk 

We will respond to your request within 30 days as required by GDPR. If you are not satisfied with how we handle your request, you can lodge a complaint with the Information Commissioner’s Office (ICO) or the relevant supervisory authority in your jurisdiction. 

9. Cookies and Tracking 

We may use cookies or other tracking technologies to improve your user experience on our website. For more information, please refer to our Cookie Policy. 

10. Changes to This Privacy Policy 

We may update this Privacy Policy from time to time. When we do, we will post the updated version on our website and update the Effective Date at the top of this page. We encourage you to review this policy periodically for any changes. 

11. Contact Us 

If you have any questions or concerns regarding this Privacy Policy, or if you wish to exercise your rights under GDPR, please contact us at: 

SMEBizness Ltd 
Data Protection Officer: Rushdy Shiham 
Email: rushdy.shiham@smebizness.co.uk 
Website: https://smebizness.co.uk