UK GDPR notice
Your data-protection rights, our lawful bases for processing, and how to exercise them.
Last updated: July 2026
The summary below sets out how GFIRS operates today. The complete policy is being finalised with our advisers and will replace this page on publication. For anything not covered here, contact hello@gfirs.com.
Controller
GFIRS Intelligence Ventures Limited is the controller for personal data processed through this platform. Company number 17026995, registered in England and Wales, Milton Keynes, United Kingdom. Contact hello@gfirs.com.
Lawful bases
Contract: to create and operate your account and to produce the rating you have requested.
Legitimate interests: to operate, secure and improve the platform, to verify submitted information against public registries, and to maintain an audit trail of rating decisions.
Consent: where you opt in to the pilot programme, to publication of your rating, or to marketing contact. You may withdraw consent at any time.
Legal obligation: where we must retain records to meet our statutory duties.
Your rights
You have the right to be informed; to access your data; to rectification of inaccurate data; to erasure; to restriction of processing; to data portability; to object to processing based on legitimate interests; and not to be subject to solely automated decisions with legal or similarly significant effects.
A GFIRS rating is produced by a rule-based methodology with human oversight. Scores are reviewed before publication, and you can ask for the basis of your rating to be explained.
How to exercise them
Email hello@gfirs.com with the subject 'Data rights request'. We will respond within one month, as required by the UK GDPR. We may ask you to verify your identity before we act.
Consent records
Where you give consent at sign-up, we record the version of the consent notice and the time it was given, so we can evidence what you agreed to.
International transfers
Our infrastructure providers may process data outside the United Kingdom. Where that happens, transfers are made under appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), the UK supervisory authority for data protection.
GFIRS Intelligence Ventures Limited, registered in England and Wales, company number 17026995, Milton Keynes, United Kingdom. Contact hello@gfirs.com.