Legal

Privacy Policy

What personal data we collect, how we use it, and your rights under UK GDPR.

Last updated: November 2026  ·  Version 1.2  ·  Questions? hello@beswitchready.co.uk
Terms of serviceCancellation policyPrivacy policy
1. Who we are2. What data we collect3. How we use your data4. Who we share your data with5. Data retention6. Your rights under UK GDPR7. Cookies8. Data security9. International transfers10. Children's privacy11. Changes to this policy12. Contact & complaints
The short version

Your privacy matters to us.

  • We collect only what we need to run your membership: name, email and the details Stripe needs for your Direct Debits.
  • We never sell your data or use it for advertising.
  • You can ask to see, correct or delete your data at any time.

1. Who we are

BeSwitchReady is the data controller for the personal data you provide when using our service. We process all data in accordance with UK GDPR and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO), registration number: ZC132528.

Data controller contact: hello@beswitchready.co.uk  ·  beswitchready.co.uk

2. What data we collect

2.1 Data you provide directly

  • Full name
  • Email address
  • Bank account details: sort code and account number (provided to Stripe only, not stored by BeSwitchReady directly), used to set up your Direct Debit mandates

2.2 Data collected automatically

  • IP address and approximate location
  • Browser type and device information
  • Pages visited and time spent on our website
  • Cookie data (see section 7)

2.3 Data from third parties

  • Stripe: Direct Debit mandate status, payment success/failure, subscription status, customer reference

3. How we use your data

  • To create and manage your subscription. Legal basis: contract performance
  • To set up and maintain your Stripe Direct Debit mandates (two, or three if you add the optional third). Legal basis: contract performance
  • To process your Stripe Direct Debit payments. Legal basis: contract performance
  • To send service emails including setup confirmation and switching guides. Legal basis: contract performance
  • To send marketing emails about new bank switching offers. Legal basis: legitimate interest. You can opt out at any time.
  • To improve our website and service. Legal basis: legitimate interest
  • To comply with legal obligations. Legal basis: legal obligation
We do not sell your personal data to third parties, use your data for advertising, or share your data with any party not listed in this policy.

4. Who we share your data with

Stripe Inc

Stripe processes your Direct Debit mandates and subscription payments. They are PCI-DSS Level 1 certified and a regulated global payments provider. Stripe Privacy Policy →

Email service provider

We use MailerLite to send service and marketing emails. They receive your name and email address only.

Legal requirements

We may disclose your data if required to do so by law, court order, or regulatory authority.

5. Data retention

  • Account and subscription data: duration of subscription plus 6 years (HMRC requirement)
  • Payment records: 6 years
  • Email communication records: 2 years after last interaction
  • Website analytics: 14 months

6. Your rights under UK GDPR

Right of accessRequest a copy of all personal data we hold about you.
Right to rectificationAsk us to correct any inaccurate data we hold.
Right to erasureAsk us to delete your data, subject to legal retention obligations.
Right to restrict processingAsk us to limit how we use your data in certain circumstances.
Right to portabilityRequest your data in a structured, machine-readable format.
Right to objectObject to processing based on legitimate interests, including marketing.
Right to withdraw consentWhere processing is based on consent, withdraw it at any time.
Right to complainLodge a complaint with the ICO at ico.org.uk or 0303 123 1113.

To exercise any of these rights, email hello@beswitchready.co.uk. We will respond within 30 days.

7. Cookies

Our website uses cookies to remember your preferences, analyse traffic, and support Stripe payment flows. When you first visit, we ask for your consent via our cookie banner. You can control cookies through your browser settings at any time.

8. Data security

  • HTTPS encryption on all pages
  • PCI-DSS compliant payment processing via Stripe. We never store card numbers or full bank details ourselves
  • Access controls limiting who can access customer data

9. International transfers

Stripe Inc is US-based. Your payment data may be transferred to and processed in the United States. Stripe maintains Standard Contractual Clauses and appropriate UK GDPR safeguards.

10. Children's privacy

BeSwitchReady is not intended for anyone under 18. We do not knowingly collect data from children. If you believe we hold data about a child, contact us immediately at hello@beswitchready.co.uk.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before they take effect.

12. Contact & complaints

PreviousTerms of service →PreviousCancellation policy →
↑ Back to top