PRV Privacy notice
What we collect, and what we don’t.
The checker is designed to need as little as possible. Your answers are used in your own browser to produce your result; nothing leaves it unless you ask us to email the summary. This page sets out the detail, and marks plainly the few facts about retention that only the business can confirm.
01 What we hold
Every category of data, and why.
| What we hold | Why | Lawful basis | Retention |
|---|---|---|---|
| Your checker answers | To produce your indicator and the one-page summary, and to reply sensibly if you contact us about it | Legitimate interests in providing the tool; consent where you ask for email delivery | Checked in your browser. Stored only if you ask for the summary — see retention the below |
| Email address | Only to send the summary you asked for, and to reply if you write to us | Consent, given by ticking the box | [CONFIRM: retention period for checker submissions, e.g. 12 months] |
| Telephone number | Only if you ask to be called about your result | Consent, given by entering it | [CONFIRM: retention period for call-back requests] |
| Consent to be contacted about your claim | To pass your answers to Edward & Amaury Solicitors so that we can contact you about your claim | Consent, separately given and freely refused | [CONFIRM: retention period for enquiry records] |
| Contact form messages | To answer you, and to correct the site where you have told us it is wrong | Legitimate interests; consent where you give it | [CONFIRM: retention period for correspondence] |
| Server logs | Security, and keeping the service working | Legitimate interests in operating a secure website | [CONFIRM: log retention period, set by the host] |
| Consent choice | To remember whether you allowed analytics | Strictly necessary — stored in your own browser, not sent to us | Until you clear your browser storage or change your choice |
02 Your rights
What you can ask us to do.
- Ask for a copy of what we hold about you, and receive it in a portable form
- Correct anything inaccurate
- Ask us to delete it, where we have no overriding reason to keep it
- Object to processing based on legitimate interests, and withdraw consent at any time
- Complain to the Information Commissioner’s Office
- Ask us to explain how we made a decision about you, where a decision was automated — the checker produces an indicator, not a decision
To exercise any of these, use the contact form and choose “a data request”. We will ask you to confirm your identity before releasing anything, because releasing data to the wrong person is itself a breach.
03 Processors and transfers
Who touches the data, and where.
The website is static, so reading it involves no application database. The only processing that happens at all is the optional summary email and the contact form, both of which are handled by named processors.
Hosting and delivery
[CONFIRM: host, server region, and whether any transfer outside the UK relies on the UK IDTA or an adequacy decision]
Transactional email
[CONFIRM: email processor, its role, and its retention of send logs]
Analytics
Only if you accept it. [CONFIRM: analytics provider, whether IP addresses are truncated, and the retention setting]
Onward referral
Nothing is passed to another firm or funder unless you separately agree in writing. [CONFIRM: whether any referral arrangement exists, and its terms]
mis-sold-investments.com — last reviewed 12 October 2026. See also the cookie policy.