Privacy Notice
Last updated: 18 July 2026
1. About This Privacy Notice
PolicyReady (trading name of bitinc OÜ) respects your privacy and is committed to protecting your personal information. This Privacy Notice explains how we collect, use, and safeguard your personal data when you use our website or purchase our compliance document services.
PolicyReady is the data controller for the personal information described in this notice.
2. Who We Are
| Trading name | PolicyReady |
| Legal entity | bitinc OÜ (Registry Code: 14297892) |
| Registered address | Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia |
| compliance@policyready.co.uk | |
| Website | policyready.co.uk |
| ICO Registration | To be registered (application in progress) |
3. What Information We Collect
We collect only the personal information you provide to us when you use our service, which may include:
- Identity and contact information: Your name, email address, telephone number, and business address.
- Business information: Your company name, FCA Firm Reference Number, ICO registration number, and website URL — needed to tailor your compliance documents.
- Payment information: We process payments through Stripe. We do not store or have access to your full payment card details. Stripe's privacy policy applies to payment data.
- Communication records: Emails and correspondence between us regarding your order.
- Technical information: When you visit our website, we collect your IP address, browser type, and pages visited. See our Cookie Policy for details.
4. How We Collect Your Information
We collect personal information directly from you when you:
- Fill in the enquiry or order form on our website
- Contact us by email at compliance@policyready.co.uk
- Purchase our services via Stripe
- Correspond with us about your order
5. Why We Use Your Information and Our Legal Basis
| Purpose | Legal Basis |
|---|---|
| Providing the compliance documents you ordered | Contract — necessary to perform the service you requested |
| Tailoring documents to your business | Contract — the documents are personalised to your information |
| Processing your payment | Contract — necessary to complete the transaction |
| Communicating with you about your order | Contract, legitimate interests |
| Improving our website and services | Legitimate interests |
| Sending occasional marketing (where consented) | Consent |
| Complying with legal and regulatory obligations | Legal obligation |
6. Who We Share Your Information With
We share your personal information only where necessary and lawful:
- Stripe — payment processing. Stripe Privacy Policy
- Netlify — website hosting. Netlify Privacy Policy
- Email service — for sending your documents and communicating with you
- Regulatory bodies — where required by law or to comply with a legal obligation
We do not sell your personal information to third parties for their own marketing purposes.
7. How Long We Keep Your Information
| Type of record | Retention period |
|---|---|
| Customer records (orders, documents) | 6 years after your last order |
| Payment records | As required by tax and accounting law |
| Email correspondence | 2 years after last contact |
| Marketing preferences | Until you withdraw consent |
| Website analytics | 26 months |
8. Your Rights
Under UK GDPR, you have the following rights:
- Right of access — request a copy of the personal information we hold about you
- Right to rectification — correct inaccurate or incomplete information
- Right to erasure — request deletion of your personal information in certain circumstances
- Right to restriction — limit how we use your information in certain circumstances
- Right to object — object to processing based on legitimate interests, including marketing
- Right to data portability — receive your information in a structured, commonly used format
- Right to withdraw consent — withdraw consent at any time where we rely on it
To exercise any of these rights, email us at compliance@policyready.co.uk. We will respond within one month.
9. Where Your Data Is Stored
Your personal information is stored securely within the UK and European Economic Area (EEA). Where third-party providers process data outside the EEA, we ensure appropriate safeguards are in place.
10. Security
We take appropriate technical and organisational measures to protect your personal information, including encrypted data storage, secure connections (HTTPS), and restricted access to personal data on a need-to-know basis.
11. Complaints
If you are unhappy with how we have handled your personal information, please contact us at compliance@policyready.co.uk.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: www.ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
12. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. Where changes are significant, we will notify you through our website or by email.