Privacy Policy

Introduction

calm-invest is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect information when you use our website or engage with our benefits advisory services.

We are registered with the Information Commissioner's Office (ICO) and comply with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

For the purposes of data protection law, calm-invest is the data controller responsible for your personal data. Our contact details are:

• Business name: calm-invest
• Address: 47 Whitworth Street, Manchester, M1 5WW
• Email: [email protected]

Information We Collect

The types of personal information we may collect depend on how you interact with us:

Information you provide directly

• Contact details (name, email address, postal address)
• Information about your household composition and circumstances
• Details about your income, employment, and financial situation
• Health information relevant to disability benefits
• Housing circumstances and tenancy details
• Information about caring responsibilities
• Correspondence and notes from consultations

Information collected automatically

• Technical data including IP address, browser type, and device information
• Usage data about how you navigate our website
• Cookie data as described in our Cookies Policy

How We Use Your Information

We use your personal information for the following purposes:

• To provide benefits advisory services and support your applications
• To communicate with you about your case and respond to enquiries
• To prepare documentation for benefit claims, reconsiderations, and appeals
• To maintain records of advice provided and case progression
• To process payments for our services
• To improve our services based on client feedback
• To comply with legal and regulatory obligations

Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract: Processing necessary to provide services you have requested
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving services and preventing fraud
• Legal obligation: Processing required to comply with legal requirements
• Consent: Where you have given explicit consent, such as for marketing communications

For special category data (such as health information), we rely on explicit consent or the substantial public interest condition for social security purposes.

Data Sharing

We may share your personal information with:

• Government departments (DWP, HMRC, local authorities) with your consent when submitting benefit applications or appeals on your behalf
• Medical professionals when requesting supporting evidence with your consent
• HM Courts and Tribunals Service for appeal proceedings
• Professional advisors and insurers as necessary
• Service providers who assist with our operations (hosting, payment processing)

We do not sell your personal data to third parties. We do not share your information with third parties for their marketing purposes.

Data Retention

We retain your personal data only for as long as necessary:

• Active case files are retained for the duration of your case plus 6 years
• Financial records are retained for 7 years as required by law
• Enquiry correspondence is retained for 2 years if no service is engaged
• Website analytics data is retained for 26 months

After the retention period, data is securely deleted or anonymised.

Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encrypted data transmission using SSL/TLS technology
• Secure storage with access controls and authentication
• Regular security assessments and staff training
• Secure disposal procedures for physical and digital records

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request limitation of processing in certain circumstances
• Portability: Request transfer of your data to another organisation
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within one month.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.

Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via our website. We encourage you to review this policy periodically.

Contact Us

For questions about this Privacy Policy or our data practices, contact us at:

Email: [email protected]
Address: 47 Whitworth Street, Manchester, M1 5WW