​1. Information About Us

 

Generate Connect Ltd is a company registered in England and Wales under company number 15460950.

 

Registered office and trading address:

3 New Concordia Wharf, Mill St, London, SE1 2BB

 

Generate Connect Ltd may trade as Connect. In this Privacy Policy, “Connect”, “we”, “us” and “our” means Generate Connect Ltd.

 

Contact email: support@generateconnect.co.uk

 

 

2. What This Policy Covers

 

This Privacy Policy explains how we collect, use, store and share your personal data.

 

It also explains your rights under UK data protection law.

 

We process personal data in accordance with the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and any other applicable UK data protection legislation.

 

 

3. What Personal Data Means

 

Personal data means any information that can identify you, either directly or indirectly.

 

This includes obvious information such as your name, address and contact details. It also includes less obvious information such as identification numbers, tax references, financial information, online identifiers and records linked to you.

 

 

4. What Personal Data We Collect

 

We may collect and use the following types of personal data:

 

• name, address, email address and telephone number;

• date of birth;

• National Insurance number;

• Unique Taxpayer Reference number;

• Government Gateway or HMRC authorisation information;

• bank account details;

• identity and verification documents;

• income and expenditure details;

• invoices, receipts and supporting documents;

• tax records and tax filing information;

• VAT registration and VAT return information;

• Self Assessment information;

• employment, pension, benefit, student loan and other income information;

• investment, dividend, interest, property, capital gains or other financial information;

• payment records;

• communications between you and us;

• information provided by third parties authorised by you;

• technical information such as IP address, device information and website usage data.

 

We do not usually collect special category personal data as defined under UK GDPR, such as health information, religious beliefs, political opinions, trade union membership, genetic or biometric data, sex life or sexual orientation.

 

However, we do collect financial, tax, identity and business information, which we treat as confidential.

 

 

5. How We Collect Personal Data

 

We may collect personal data:

 

• directly from you;

• through forms, questionnaires, portals, emails, calls, messages or document uploads;

• from your customers, contractors, main contractors or other parties you authorise;

• from HMRC or other government bodies where authorised or required;

• from software platforms, verification providers, payment providers or other service providers used to deliver our services;

• from publicly available sources where relevant and lawful.

 

 

6. How We Use Personal Data

 

We may use your personal data to:

 

• provide services to you;

• onboard you as a client or user;

• verify your identity;

• meet anti-money laundering and compliance requirements;

• raise invoices and manage payments;

• keep accounting records;

• prepare and file tax returns;

• prepare and file VAT returns;

• manage HMRC registrations, authorisations and communications;

• contact you about services, documents, filings, payments or support;

• manage client accounts and service records;

• respond to queries, complaints or disputes;

• recover unpaid fees;

• comply with legal, tax, regulatory and insurance obligations;

• improve our services, systems and internal processes;

• send marketing communications where permitted by law.

 

 

7. Lawful Basis for Using Personal Data

 

We must have a lawful basis to use your personal data.

 

Depending on the purpose, we may rely on one or more of the following lawful bases:

 

• Contract — where we need to use your data to provide services to you or take steps before providing services.

• Legal obligation — where we need to comply with tax, accounting, anti-money laundering, regulatory or other legal requirements.

• Legitimate interests — where we use your data to operate, manage, protect and improve our business, provided your rights do not override those interests.

• Consent — where we ask for your consent for a specific purpose, such as certain marketing activities or optional data sharing.

• Vital interests — where processing is necessary to protect someone’s life.

• Public task — where processing is necessary for a task carried out in the public interest, where applicable.

 

Where we rely on consent, you may withdraw that consent at any time.

 

Withdrawing consent does not affect processing already carried out before withdrawal. It also does not affect processing we need to continue for another lawful basis, such as legal obligation, contract or legitimate interests.

 

 

8. Marketing

 

We may contact you with information about our services, updates, events, offers or related services.

 

We will only send marketing where permitted by law.

 

You can opt out of marketing at any time by using the unsubscribe option in our communications or by contacting us.

 

We will not sell your personal data to third parties for marketing.

 

 

9. Sharing Personal Data

 

We may share personal data where necessary to provide our services, operate our business, comply with legal requirements, protect our rights or meet your instructions.

 

This may include sharing data with:

 

• HMRC and other government bodies;

• accountants, tax advisers, consultants and subcontractors;

• software, hosting, CRM, document, communication and payment providers;

• banks and payment service providers;

• identity verification, AML and compliance providers;

• insurers, legal advisers and professional advisers;

• companies within our group or associated businesses;

• your customers, contractors, main contractors or other parties involved in the services provided to you;

• regulators, law enforcement agencies, courts or other authorities where required or permitted by law.

 

We will only share personal data where there is a lawful basis to do so.

 

 

10. International Transfers

​

Some of our service providers or systems may process or store personal data outside the United Kingdom.

 

Where personal data is transferred outside the UK, we will take appropriate steps to protect it in accordance with UK data protection law. This may include using adequacy regulations, approved contractual safeguards or other lawful transfer mechanisms.

 

 

11. How Long We Keep Personal Data

 

We keep personal data only for as long as necessary for the purposes for which it was collected.

 

We may retain personal data for up to 10 years after the end of our relationship with you or the relevant tax, accounting or service period, where required for legal, tax, regulatory, insurance, compliance or business record purposes.

 

We may retain data for longer where required by law, a regulator, HMRC, a court, a dispute, an investigation or a legitimate business need.

 

 

12. How We Protect Personal Data

 

We take appropriate measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

 

These measures may include:

 

• limiting access to those who need it;

• using secure systems and platforms;

• using confidentiality obligations;

• keeping records of access and processing where appropriate;

• applying security measures to documents, systems and communications;

• having procedures for dealing with data incidents.

 

 

13. Your Rights

 

Under data protection law, you may have the following rights:

 

• the right to be informed about how we use your personal data;

• the right to access the personal data we hold about you;

• the right to have inaccurate personal data corrected;

• the right to ask us to delete your personal data;

• the right to restrict how we use your personal data;

• the right to object to certain uses of your personal data;

• the right to data portability;

• rights relating to automated decision-making and profiling;

• the right to withdraw consent where processing is based on consent.

 

Some rights may not apply in all circumstances.

 

For example, we may need to keep certain information to comply with legal, tax, regulatory, accounting or AML obligations.

 

 

14. Automated Decision-Making

 

We do not make decisions about you based solely on automated processing where that decision has a legal or similarly significant effect on you.

 

 

15. How to Access Your Personal Data

 

You can ask us for a copy of the personal data we hold about you. This is known as a subject access request.

 

Please send requests to:

 

support@generateconnect.co.uk

 

We will normally respond within one month.

 

There is usually no charge, but we may charge a reasonable fee or refuse a request where allowed by law, for example if a request is clearly unfounded, excessive or repetitive.

 

 

16. Complaints

 

If you have any concerns about how we use your personal data, please contact us first so we can try to resolve the issue.

 

You also have the right to complain to the Information Commissioner’s Office.

 

ICO website: www.ico.org.uk

 

 

17. Contact Us

 

To contact us about this Privacy Policy or your personal data, please use:

 

Email: support@generateconnect.co.uk

Post: Generate Connect Ltd, 3 New Concordia Wharf, Mill St, London, SE1 2BB

 

 

18. Changes to This Privacy Policy

​

We may update this Privacy Policy from time to time.

 

The latest version will be made available on our website or provided to you by email or other appropriate means.

 

Last updated: 1st May 2026