Privacy Policy (GDPR)

MRIntelligence &Co LTD · Last updated: June 2026

1. Data Controller

MRIntelligence &Co LTD is the data controller responsible for your personal data. We comply with the UK GDPR and EU GDPR.

2. Data We Collect

We collect: (a) Account data — email, name, country; (b) Case data — case type, merchant, amount, payment method, transaction date, case description; (c) Evidence files — uploaded documents (encrypted at rest); (d) Payment data — processed by Stripe, we do not store card details; (e) Usage data — IP address, browser type, interaction logs.

3. Legal Basis for Processing

We process your data under: (a) Contract — to provide the subscription service; (b) Legal obligation — for tax and compliance records; (c) Legitimate interest — for platform security and audit logging; (d) Consent — for non-essential cookies and marketing.

4. Data Storage and Security

Data is stored on Cloudflare infrastructure (EU/UK regions). Evidence files are encrypted at rest. We maintain audit logs of all data access. Payment data is handled by Stripe (PCI-DSS Level 1 certified).

5. Data Retention

We retain your data for the duration of your subscription plus 3 years for legal compliance. You may request deletion of your data at any time by emailing contact@mrintelligence.uk.

6. Your Rights (GDPR)

You have the right to: (a) Access your data; (b) Rectify inaccurate data; (c) Erase your data (right to be forgotten); (d) Restrict processing; (e) Data portability; (f) Object to processing; (g) Withdraw consent. To exercise these rights, contact contact@mrintelligence.uk

7. International Transfers

Data may be transferred between UK and EU. Both are covered by adequacy decisions. No data is transferred to countries without adequate data protection.

8. Contact

For privacy enquiries or data subject requests, contact contact@mrintelligence.uk

For questions about this document, contact contact@mrintelligence.uk