Privacy Policy

How we collect, use, and protect your personal information

Last updated: 24 July 2026

1. Introduction

Palatine Research and Data Limited ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services or visit our website.

We are registered with the Information Commissioner's Office (ICO) under registration number Z6551506 and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Palatine Research and Data Limited is the data controller responsible for your personal data.

Registered Address:
Grange Bank, Grange Road
Wirral, CH48 4DY
United Kingdom

Company Registration: 04366385
VAT Registration: GB 794 5360 93
Phone: 0151 929 7900

3. Information We Collect

3.1 Information You Provide

We collect personal information that you voluntarily provide when:

  • Creating an account on our website
  • Placing an order for our services
  • Contacting us via phone, email, or our contact form
  • Subscribing to our communications

This may include:

  • Name, email address, phone number, and postal address
  • Company name and business details (for corporate clients)
  • Payment and billing information
  • Information about individuals you are tracing (subject data)

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address and browser type
  • Pages visited and time spent on our site
  • Referring website addresses
  • Device information

4. How We Use Your Information

We use your personal information for the following purposes:

  • Service delivery: To provide our tracing, investigation, and reporting services
  • Account management: To create and manage your account
  • Communication: To respond to enquiries and provide customer support
  • Legal compliance: To comply with legal obligations and regulatory requirements
  • Business operations: To process payments and maintain records
  • Service improvement: To analyse website usage and improve our services

5. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract: Processing necessary for the performance of a contract with you
  • Legal obligation: Processing necessary to comply with legal requirements
  • Legitimate interests: Processing necessary for our legitimate business interests, where not overridden by your rights
  • Consent: Where you have given specific consent for processing

6. Subject Data (Trace Subjects)

In providing our tracing services, we process personal data about individuals being traced ("subject data"). This processing is conducted:

  • For the legitimate interests of our clients (e.g., debt recovery, legal proceedings, beneficiary tracing)
  • In compliance with the Data Protection Act 2018 and UK GDPR
  • Using lawfully obtained data sources

We do not process subject data for purposes that would cause unwarranted harm to the individual concerned.

7. Data Sharing

We may share your personal data with:

  • Service providers: Third parties who assist in delivering our services (e.g., payment processors, data providers)
  • Professional advisers: Lawyers, accountants, and insurers where necessary
  • Regulatory bodies: Where required by law or regulation
  • Clients: Trace results are shared with instructing clients only

We do not sell your personal data to third parties.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Secure password hashing using industry-standard algorithms
  • Regular security assessments
  • Staff training on data protection
  • Access controls and audit logging
  • Professional indemnity insurance

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Client records: 6 years after the last transaction (for legal and accounting purposes)
  • Trace results: As specified in our retention policy, configurable by service type
  • Account data: Until account deletion is requested, plus any legally required retention period

10. Your Rights

Under UK GDPR, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data (where applicable)
  • Restriction: Request limitation of processing
  • Portability: Request transfer of your data
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent

To exercise these rights, please contact us on 0151 929 7900 or use our contact form.

11. International Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. Cookies

Our website uses cookies to improve your experience. For detailed information about our use of cookies, please see our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us: