BuySure / Policies
Privacy Notice
Controller and contact
BuySure Trust & Insurance Services GB Ltd is Registered in England and Wales, company number 04747160. Registered office: Carr Farm Garden Centre, Birkenhead Road, Meols, Wirral CH47 9RE. Telephone 07811 027651. For support, contact support@buysuretrust.com. Do not email passwords, payment details or identity documents. Hardeep Rai is our Internal Privacy & Data Protection Lead, overseeing monthly retention reviews and coordinating authorised privacy requests. ICO registration ZA022204, in the name of BuySure Trust & Insurance Services GB Ltd. Registration is not certification of our processing practices.
Information and sources
Depending on the service used, the platform records contact and business details, enquiries, applications, order/payment references and statuses, memberships, workspace entries, reports, exports, account verification, notification preferences and security/audit events. Information may come from you, an authorised organisation user or the relevant provider. Staff and brokers have individual credentials and MFA. BuySure’s hosted checkout uses Stripe for payment details; do not send raw card or bank details to BuySure.
How we use information and lawful bases
We use enquiry details to understand and respond to your request. Where you ask us to take necessary steps towards a contract with you, such as preparing a quote, we rely on those pre-contractual steps; for an agreed service, we rely on performing that contract. For general enquiries and enquiries made on behalf of a business, our legitimate interests are responding to relevant requests and managing business relationships, balanced against your rights and reasonable expectations. Security and abuse prevention serve our legitimate interest in protecting customers and the platform. Where a specific law requires processing, we rely on that legal obligation. We do not treat submitting an enquiry as marketing consent.
Providers and recipients
The configured architecture uses Render hosting, Stripe payments, Resend transactional email and Cloudflare R2 encrypted backup storage. Support replies use BuySure’s Microsoft 365 mailbox. Staff access depends on role and organisation. We share information with external providers only where necessary for the service you request, with appropriate privacy disclosures. This may include the relevant lender, insurer or verification provider. We explain the relevant recipient and purpose before a referral where applicable; submitting an enquiry does not itself send an application to every provider. Only Don processes enquiries; authorised Executive staff have read-only visibility.
Retention and deletion
We keep ordinary enquiry records for 24 months after the last interaction, except where longer retention is legally required. The last interaction means the latest substantive communication or handling of your request, not simply viewing a record. An enquiry that becomes an application or service record may be subject to the retention requirements for that service. This ordinary-enquiry period does not set a universal retention period for contracts, payment records, regulated applications, security records or backups. Retention for those records depends on their purpose and applicable legal duties. Cancellation of a membership does not itself erase records we must retain. You can ask us about the retention applicable to your information at support@buysuretrust.com.
Verification retention
Our business policy is to retain KYC/KYB verification service records for seven years, ordinarily measured from completion of the agreed check or the end of the relevant ongoing service relationship. This is separate from ordinary enquiries and is not a universal statutory period. Records obtained specifically for money-laundering due diligence follow applicable category-specific rules, including any earlier deletion duty or permitted exception. Legal proceedings and other justified legal requirements may affect retention. Hardeep oversees category-specific review; specialist records are not automatically deleted by the ordinary-enquiry process.
Security
Implemented controls include HTTPS, server-side authentication, role/tenant restrictions, password/MFA for staff/brokers, expiring member sign-in links, protected files and encrypted off-host backups. Security is not an absolute guarantee.
Your rights
Depending on the processing, rights include access, correction, erasure, restriction, objection and portability. Where processing relies on consent, you can withdraw it without invalidating earlier lawful processing. Send privacy requests to support@buysuretrust.com. Requests are assigned to an authorised person for handling; proportionate identity checks may be needed. Rights are subject to applicable exceptions. You may object to processing based on legitimate interests and may complain to the Information Commissioner’s Office (ICO).
Reports, analytics and decisions
Reports summarise your saved workspace information; missing inputs should be labelled. Internal aggregate analytics support management. Optional campaign attribution is consent-gated.
Messages and cookies
Enquiry replies, account links, receipts and report notices are transactional messages. We send marketing only where you have separately opted in. Submitting an enquiry, accepting service terms or choosing cookie preferences is not a marketing opt-in. You can withdraw marketing consent at any time by using the unsubscribe option in a marketing message or contacting support@buysuretrust.com; this does not stop necessary service communications. See Cookies for browser storage.