Privacy Policy

Who we are and how to contact us

FinanceGo Limited is the controller for CreditWatchGo. It is registered in Scotland under company number SC727633. Its registered office is 16b Silverknowes View, Edinburgh, Scotland, EH4 5PY.

Send privacy questions or rights requests to support@creditwatchgo.com with the subject “Data protection request”.

Information we handle

We handle account details including name, business email, organisation, role, password hash and authentication sessions, plus support communications, billing identifiers and subscription status. Stripe collects payment details on its hosted pages; CreditWatchGo does not receive full card details.

Your organisation may add customer, supplier or partner records, relationship types, exposure, credit limits, payment terms, alert preferences and follow-up records. We also process public company and corporate-event information from Companies House and The Gazette, and limited IP, request and security data needed to protect the service.

Purposes and lawful bases

We process account, portfolio, monitoring, alert and billing data to provide the service and take steps requested before a contract. We rely on legitimate interests for service security, fraud prevention, administration and verifiable B2B risk intelligence based on public registers.

We process records where required by legal, tax, accounting or regulatory obligations. If an optional activity requires consent, we will ask first and make withdrawal easy.

Public-register data and automated decisions

Public records may contain personal data about directors, officers, persons with significant control or sole traders. We retain source references so users can verify the official record. CreditWatchGo does not make solely automated decisions that produce legal or similarly significant effects for an individual.

Recipients and international transfers

Authorised users in your organisation can access organisation records. We use providers for infrastructure, email, security, support and Stripe billing. We do not sell personal data or use it for third-party advertising.

Where a provider processes data outside the UK, we use UK adequacy regulations or approved contractual safeguards where required. Contact us for information about safeguards relevant to your data.

Retention

Authentication sessions expire after no more than 14 days and can be revoked earlier. Browser preferences remain until cleared. Account data is kept while an account is active and for a limited period afterwards for closure, disputes, security and legal duties. Billing and audit records may be kept longer for accounting, tax, fraud prevention or legal requirements.

Public company events may be retained as a dated, source-linked history. We delete or anonymise data when it is no longer needed for its purpose.

Your rights and complaints

Depending on the circumstances, you may have rights to information, access, correction, erasure, restriction, objection and portability, and to withdraw consent where used. We normally respond within one calendar month after verifying identity and may coordinate with your organisation where it controls the data.

You can complain to the Information Commissioner’s Office through ico.org.uk/make-a-complaint.

Security and changes

We use access controls, encryption, password hashing, session controls, audit records and operational safeguards. No internet service can guarantee absolute security.

We will update this notice when processing changes materially and publish the current date above.