Privacy policy

• Identity, contact details and service requirements submitted through an enquiry or provided by the partner that handled your phone enquiry, together with the partner and lead reference.
• For checkout: account holder name, bank name, IBAN and electronic signatory name entered by the customer. The checkout does not collect customer email, street address, city, postal code or country of residence. Checkout-link creation can record a customer name and lead reference without requiring an email address. A reusable link creates a separate order for each customer submission.
• The accepted offer and price, order reference, consent wording and version, acceptance timestamp, available connection IP and browser information, and payment status. Where a complete mandate is accepted, its reference and generated copy are also retained; pending order-details records do not include a completed mandate.
• Technical information and consent preferences needed to secure and operate the site. Private checkout links and bank details are not sent to marketing analytics.

We use enquiry and checkout information to prepare and perform the requested service agreement, administer payment authorisation and provide mandate copies. Phone lead data is kept distinct from the customer’s subsequent electronic mandate acceptance. We use limited technical data to secure the service and substantiate consent. Where optional analytics is enabled, we rely on your consent.

We may keep business correspondence and mandate evidence where necessary for legal obligations and our legitimate interests in managing relationships, preventing abuse and establishing or defending legal claims.

We do not sell personal data. Mandate and payment information may be provided to the approved payment provider or bank for collection and dispute handling. We also use contracted hosting, database, email and professional-service providers, or disclose information where required by law. Client operational data is handled under the separate client services agreement and data-processing terms.

If a service provider processes data outside the United Kingdom, we use an appropriate legal transfer mechanism and supplementary safeguards where required by applicable data protection law.

Unsuccessful service enquiries are generally retained for up to 24 months. Mandate, contract and payment evidence is retained for the applicable provider, scheme and legal retention period, including any active dispute. Access to records is restricted to authorised operations staff; checkout identity and bank details and stored mandate PDFs are encrypted. Private links expire, and mandate-copy access is restricted.

Depending on the circumstances, you may ask to access, correct, erase, restrict or receive your personal data, or object to certain processing. You can withdraw analytics consent at any time.

Contact operations@abosysteme.com. You may also complain to the UK Information Commissioner’s Office.