Privacy Policy
Last updated 23 October 2026
1. Who we are
Veradine Ltd (company number HE 487415, registered in Cyprus, registered office Sotiras 2, Tziovani Building, Flat/Office 6, Paralimni 5286, Famagusta, Cyprus) runs FindYourBenefit Business and is the data controller for the personal data described here. FindYourBenefit Business is an independent service. It is not a government body, it is not authorised by the Financial Conduct Authority, and it does not lend, broker credit or give financial or debt advice.
2. What we collect
- Contact details: your name, email address, phone number (optional) and postcode, and the business’s name and premises postcode.
- Your answers in the check: what you tell us about the business, such as its type, sector, premises, staff, activities and costs.
- Records of your request and consent: the date and time of your check and purchase, the boxes you ticked, and the IP address used. See section 5.
- Purchase records: the amount, a payment reference and its status, and the billing details you enter. Your card number goes to our payment provider. We never see or store it.
- Your account: the letters you generate or edit, and passkeys you register for signing in.
- Emails: the emails we send you and the emails you send us.
- If you came from a partner website: the contact details and answers that website passed to us with your consent, and its record of that consent.
3. Why we use it, our lawful basis, and how long we keep it
The lawful bases are those in Article 6 of the UK GDPR. Retention periods are explained in section 9.
| Purpose | Data used | Lawful basis | How long we keep it |
|---|---|---|---|
| Run your free check and show your results | Contact details, postcode and your answers | Steps you asked us to take before a contract (Art 6(1)(b)) | 12 months after your check if you do not buy; 6 years after purchase if you do |
| Provide your paid report, letters and account | Contact details, answers, the letters you generate or edit | Performing our contract with you (Art 6(1)(b)) | 6 years after purchase |
| Take payment and give refunds | Amount, payment reference and status, billing details | Contract (Art 6(1)(b)) and our legal duty to keep accounting records (Art 6(1)(c)) | 6 years after purchase |
| Keep proof of what you asked for and agreed to | Date, time, IP address and the exact consent wording you agreed to | Legal obligation to be able to show consent (Art 6(1)(c)) and legitimate interests (Art 6(1)(f)) | As long as the check or purchase it relates to |
| Handle complaints, payment disputes (chargebacks), fraud and legal claims | Purchase records, consent records, emails, and a list of email addresses blocked after a fraud report or chargeback | Legitimate interests in defending claims and preventing fraud (Art 6(1)(f)) | 6 years after the complaint, dispute or claim ends |
| Send service emails (receipt, sign-in links, your results) | Name and email address | Contract (Art 6(1)(b)) | As long as the check or purchase it relates to |
| Send reminders about the report from your check (for up to 14 days after it), unless you tick the opt-out box beside the email field or unsubscribe. Checks made before 29 October 2026: only if you ticked the marketing box | Name, email address and the summary of your results (number of opportunities and the estimated total) | Legitimate interests in following up the report you asked about (Art 6(1)(f)), sent under the “soft opt-in” in regulation 22(3) of the Privacy and Electronic Communications Regulations. Every reminder has a one-click unsubscribe | Until you opt out, and never more than 14 days after your check |
| Know how you found us (the page you landed on and the website or search that sent you), to see which pages and adverts work | Landing page address and its campaign tags, the referring website, device type, and the time you spent on the check. Sent with your check; nothing is stored on your device | Legitimate interests in running and improving our service (Art 6(1)(f)) | As for the free check (12 months, or 6 years after a purchase) |
| Pass your contact details to our personal check (FindYourBenefit), only if you tick that box | Name, email, phone and postcode | Your consent (Art 6(1)(a)) | As for the free check (12 months, or 6 years after a purchase) |
| Record leads that partner websites send us | The contact details and answers the partner sent, and its record of your consent | Your consent to the partner sharing your details with us (Art 6(1)(a)), and legitimate interests in keeping evidence of it (Art 6(1)(f)) | 12 months if you do not buy; 6 years after a purchase |
| Translate our emails if you used the site in another language | The content of the email | Legitimate interests in sending you emails you can read (Art 6(1)(f)) | Not kept by the translation service beyond the request (see section 6) |
| Keep the service secure and stop abuse | IP address, sign-in and checkout attempts, server logs | Legitimate interests (Art 6(1)(f)) | Security log 12 months; web server logs 14 days |
| Count visits to improve the site | Page viewed, referring site, browser, device type and country (no cookies, no IP address stored) | Legitimate interests (Art 6(1)(f)) | Kept as visit statistics that do not identify you |
4. Health and disability information (special category data)
The business check does not ask for health or disability information. If you also use our personal check, its privacy policy explains how health information is handled there, which is only with your explicit consent.
5. Records of your request and consent
We keep these records to prove what you asked for and agreed to, and to answer complaints, payment disputes and legal claims:
- Your check: the date and time you submitted it, saved with your answers and the boxes you ticked (privacy, optional emails, FindYourBenefit).
- Your purchase: as our Terms (clause 5) explain, at checkout you confirm you want your report straight away and understand you then lose the 14-day right to cancel. We record the exact wording you agreed to with the date, time and IP address.
- Security log: the IP address of sign-in attempts and checkout sessions, used to limit repeated attempts and to investigate fraud.
- Web server logs: the IP address, time and page of each request, kept for 14 days.
- Leads from partner websites: the details the partner sent us, exactly as received, including its record of your consent.
If you dispute a payment with your bank, we send our payment provider the evidence it needs: the purchase record, the consent record with its time and IP address, and the record that your report was delivered.
6. Who we share data with
We do not sell your personal data, and we do not pass it to other companies for their own marketing. We have no lead-buying or referral partners: nothing you tell us is passed to another firm to contact you. Your data is shared only with the service providers below, who act on our instructions, and where the law requires it.
| Recipient | What for | Where |
|---|---|---|
| Hetzner Online | Hosts our servers and database | Helsinki, Finland |
| Backblaze | Stores our nightly database backups, encrypted before they leave our server | Amsterdam, Netherlands |
| Viva.com (Viva Wallet), our card payment provider | Takes card payments and refunds, runs 3-D Secure checks, and receives dispute evidence if you dispute a payment. Your card details go to them, never to us | Their own systems, under their own privacy notice |
| Amazon Web Services (Amazon SES) | Delivers our emails | Stockholm, Sweden |
| Anthropic | Translates an email into your language, only if you used the site in a language other than English. Anthropic does not use this data to train its models | United States |
| Data8 and postcodes.io | Look up addresses and your council from your postcode. Only the postcode is sent | UK-based services |
| FindYourBenefit (our personal check, run by Veradine Ltd) | Your contact details, only if you tick the box asking for a separate personal check | Our own servers |
Where your data comes from. Most people give us their details in our own check. Some come to us from partner websites (lead suppliers, some of which send leads through the LeadByte lead-distribution platform). Those partners pass us your details only with your consent, and we pay them for the introduction. We do not send your data back to them.
Transfers outside the UK. Finland, Sweden, the Netherlands and Germany are covered by UK adequacy regulations. Anthropic is in the United States and processes the email under its commercial data processing terms. We may also disclose data to the police, courts, the ICO or another authority where the law requires it, or to our professional advisers.
7. How your report and letters are made (automated evaluation)
- A rules engine, not AI. Your check is worked out by a fixed set of written rules. Each rule is based on the published conditions for a scheme (from GOV.UK, HMRC, the DWP, Ofgem, councils and similar official sources) and compares them with your answers. Where a scheme fits, the report shows it with an estimated value range and the source it comes from. The same answers always give the same result.
- Letters are fixed templates filled in with your details and answers. You can edit any letter before you send it.
- No AI or machine learning is used to decide what you may qualify for, or to write your report or letters. The only AI we use is the email translation described in section 6.
- No decision with legal or similarly significant effect is made about you by automated means alone(UK GDPR Article 22). Your report is an indication only: the council, HMRC, the DWP or the company concerned decides any claim you make.
- Payment safeguards. If our payment provider reports a payment as fraudulent or disputed, our system refunds it and blocks that email address from buying again, and it turns away a free check from an email that already has one.
- Ask a person. You can ask for a person to review your results or any of these steps by emailing support@findyourbenefit.co.uk.
8. Cookies and analytics
We use no advertising or tracking cookies, and we do not record your screen, mouse movements or keystrokes. The only cookies we set are:
| Name | Purpose | Type | Lasts |
|---|---|---|---|
mf_customer | Keeps you signed in to your account. Set only when you sign in | Strictly necessary | 30 days |
ei18n_lang | Remembers the language you chose for the site. Set only if you pick a language | Strictly necessary (a setting you asked for) | 30 days |
If you close the language bar, your browser's local storage remembers that (ei18n_dismissed); it never leaves your device. Visit statistics come from Umami, which runs on our own server (Hetzner, Falkenstein, Germany). It sets no cookies, does not store your IP address and does not follow you to other sites. On the payment page, the card form is loaded from our payment provider's servers, and any cookies it sets are its own, under its own privacy notice. Because we only use strictly necessary cookies, we do not show a cookie banner.
9. How long we keep data
- A free check you did not buy: 12 months after the check.
- A purchase (report, letters, payment, consent and email records): 6 years after the purchase, the period for tax records and legal claims.
- Complaints, payment disputes and fraud records, including the list of blocked email addresses: 6 years after the matter ends.
- Security log: 12 months. Web server logs: 14 days.
- Backups: nightly encrypted copies are kept for up to 12 months (7 daily, 8 weekly and 12 monthly copies), so deleted data disappears from backups as they expire.
Our records begin in June 2026, so no record has yet reached the end of its period. Deletion at the end of each period will run as a scheduled clean-up, which we will have in place before June 2027, when the first free-check records reach 12 months. You can ask us to delete your data sooner at any time (see section 10).
10. Your rights
Under the UK GDPR you can ask us to: give you a copy of your data; correct it; delete it; restrict how we use it; give it to you in a portable format; and you can object to anything we do on the basis of legitimate interests. Where we rely on your consent (health information, sharing with our other check) you can withdraw it at any time. You can stop our reminder emails at any time with the unsubscribe link in any of them, and you have an absolute right to object to direct marketing. Email support@findyourbenefit.co.uk. It is free, and we reply within one month. Some records, such as purchase and payment records, we must keep for the periods above even if you ask us to delete them, and we will tell you if that applies.
11. Extra help if you need it
If illness, disability, bereavement, money worries or anything else makes things harder for you, tell us and we will adjust how we help: plain English, at your pace, and pointers to free help such as Citizens Advice and MoneyHelper. If you did not understand what you were paying for, we refund you in full. Read our full Vulnerable Customer Policy.
12. Contact and complaints
Data requests and questions: support@findyourbenefit.co.uk. If you are unhappy with how we handle your data, please tell us first and we will try to put it right. You can also complain to the data protection authority where you live (in the UK, the Information Commissioner's Office at ico.org.uk).