Privacy Notice (UK GDPR)

1. Data Controller Identity

The Data Controller for personal data processed via BossMode.net is BossMode (UK Ownership & Buyout Platform), registered with the UK Information Commissioner's Office (ICO) under Registration Number ZC136598. Data protection enquiries and Subject Access Requests (SARs) may be sent to operator@bossmode.net.

2. Categories of Data We Process & Lawful Basis (UK GDPR Art. 6)

• Customer Order & Fulfilment Data (Article 6(1)(b) — Performance of a Contract): When you purchase a Vault pass or Trade Kit, we collect your email address and order metadata to deliver your digital templates and database credentials. All payment card data is handled directly by Stripe Payments UK Ltd over 256-bit SSL; we never see or store your card numbers.
• Tax & Accounting Records (Article 6(1)(c) — Legal Obligation): Transaction invoices are retained for 6 years in accordance with HMRC statutory record-keeping rules.
• Public UK Companies House Registry Filings (Article 6(1)(f) — Legitimate Interests): We index publicly available UK Private Limited Company registration numbers, SIC codes, incorporation dates, registered office postcodes, and active officer birth-year records published by UK Companies House under the Open Government Licence v3.0 for legitimate B2B succession research.

3. Company Director Opt-Out & Suppression Requests

If you are an active director of a UK Limited Company and wish to have your company registration number suppressed from our public showcase or succession search index, email operator@bossmode.net with your 8-digit Companies House number and we will suppress the record within 24 hours.

4. Your Statutory Rights Under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• Request access to a copy of the personal data we hold about you (Subject Access Request);
• Request immediate rectification or erasure ("Right to be Forgotten") of your personal data;
• Object to processing based on legitimate interests or restrict processing;
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk • Tel: 0303 123 1113).