GDPR & data protection

Personal information is information about an identifiable living person. Our data-protection approach is governed by the UK GDPR and the Data Protection Act 2018, as amended, including by the Data (Use and Access) Act 2025. Electronic marketing and browser storage are also subject to the applicable Privacy and Electronic Communications Regulations.

This page is a practical guide to contacting inLIFE about data protection. Our privacy policy explains our own processing in detail, including purposes, lawful bases, sharing and retention.

When we decide why and how to use personal information for enquiries, marketing, billing and running our business, inLIFE acts as a controller.

When a client instructs us to host, maintain or manage systems containing its customers’ or staff’s personal information, we may act as a processor. The client normally remains responsible for deciding the purpose and lawful basis, providing privacy information and giving lawful instructions. The actual roles depend on the service.

Client-specific processing terms should cover the subject matter, duration, data types, people concerned, instructions, confidentiality, security, subprocessors, rights assistance, incidents, transfers, return or deletion of data and appropriate assurance. Contact us for the processing terms and supplier information relevant to your service; this public page does not replace that agreement.

You may have rights to access, correct, erase, restrict, object to or receive a portable copy of personal information, depending on the processing and any lawful exceptions. You can withdraw consent where we rely on it. You can object to direct marketing at any time.

Email [email protected], call 01543 675474, use our contact form or write to inLIFE Ranch, Chase Oak House, Burntwood, Staffordshire, WS7 3QL. You do not have to use particular wording or a special form.

Tell us enough to locate the information, the relevant service and how you would like us to reply. We will only ask for additional identification where it is reasonably needed. Avoid sending identity documents until requested through an appropriate channel.

Subject-access requests are normally answered within one month and free of charge. For a complex request or multiple requests, the law can allow up to two further months; we will explain any extension. Reasonable identity checks, necessary clarification and other limited statutory exceptions may affect the time limit or response.

If your request concerns a client’s website or business rather than our own records, please contact that organisation as controller. We can help identify the appropriate route and assist our client under the agreed processing arrangements.

If you are unhappy about how we have handled personal information, contact [email protected] or use the contact methods above. Explain your concern, the relevant dates or service, and the outcome you are seeking.

We will acknowledge your complaint within 30 days, investigate without undue delay, keep you informed and explain the outcome. A complaint does not remove your ability to make an information-rights request.

You can also contact the Information Commissioner’s Office or call 0303 123 1113. Our internal process does not prevent you seeking independent advice or using other legal rights.

If you believe information connected with an inLIFE service has been exposed, lost or accessed without permission, contact [email protected] promptly. Include the affected service, what you have noticed and a safe way to reach you. Existing clients can also use their client portal support contact.

Please do not send passwords or unnecessary copies of personal records. We will assess the report and coordinate the response with the relevant controller and suppliers. Any legal notification requirements depend on the circumstances and risk.

Our cookie policy and media preferences explain browser storage and optional external video players. Newsletter preferences can be changed using an unsubscribe link or by contacting us. New processing or a changed service may require updated privacy information and service-specific arrangements.