Privacy Policy for Territory Insights Ltd

Effective Date: 15/12/2025

This Privacy Policy explains how Territory Insights Ltd (Company No. 16557139), part of the GNB Group (“we”, “us”, “our”), collects, uses, and protects personal data when you use our software, platform, and related services (the “Service”).

We are committed to protecting personal data and complying with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Our Role Under Data Protection Law

Depending on the context, Territory Insights acts as either:

Data Controller — where we determine how and why personal data is processed (for example, account management, billing, platform analytics, proprietary datasets); or
Data Processor — where users process personal data relating to third parties through the Service (for example, property marketing, campaign activity, lead management).

Where we act as a processor, we process personal data in accordance with the user’s instructions and applicable data protection law.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Account & Business Information

Name, company name, job title
Business address, email address, phone number
Account login credentials

b) Billing & Payment Information

Payment method details (processed securely via third-party payment providers)
Transaction history and billing records

c) Platform Usage & Technical Data

IP address, device identifiers, browser type
Login activity and timestamps
Feature usage, interactions, and system logs

d) Property & Marketing-Related Data

Property-level and postcode-level data
Property ownership or occupancy indicators
Campaign activity records (letters, postcards, fulfilment status)

This may include property-related personal data obtained from official or licensed data providers, including public registers.

3. How We Use Personal Data

We process personal data to:

Provide, operate, and maintain the Service
Create and manage user accounts
Administer subscriptions, wallets, billing, and payments
Deliver print, fulfilment, and third-party services
Enable automation, reporting, attribution, and analytics features
Communicate service-related updates and support messages
Monitor platform security and prevent misuse
Improve performance, features, and user experience
Comply with legal, regulatory, and accounting obligations

4. Automated Processing & Analytics

Certain features of the Service use automated logic, analytics, or algorithmic processes to support:

Campaign delivery
Workflow automation
Reporting and performance insights
Attribution and analytical outputs

These processes support service functionality and optimisation. They do not produce legal or similarly significant effects on individuals.

5. Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

Performance of a contract (providing the Service)
Legitimate interests (operating, securing, and improving the Service)
Legal obligation (tax, accounting, regulatory compliance)
Consent (where required, such as marketing communications)

6. Sharing of Personal Data

We may share personal data with:

Payment processors (e.g. Stripe, GoCardless)
Hosting providers and infrastructure partners
Print, fulfilment, and delivery providers
Analytics and monitoring providers
Professional advisers and regulatory authorities where required
Other companies within the GNB Group

We do not sell personal data to third parties.

All service providers are required to process data securely and in accordance with applicable data protection laws.

7. International Data Transfers

Personal data may be transferred outside the United Kingdom where required to operate the Service.

Where this occurs, we ensure appropriate safeguards are in place, including UK-approved standard contractual clauses or other lawful transfer mechanisms recognised under UK GDPR.

8. Data Retention

We retain personal data only for as long as necessary to:

Provide the Service
Meet contractual obligations
Comply with legal and accounting requirements
Resolve disputes and enforce agreements

Data associated with closed accounts may be retained in archived systems for up to seven (7) years where required by law.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

Encrypted data storage and transmission
Role-based access controls
Monitoring and security logging
Regular security reviews
Staff training on data protection and confidentiality

10. Your Rights

Under UK GDPR, you have the right to:

Access personal data we hold about you
Request correction of inaccurate data
Request erasure (where applicable)
Object to or restrict processing
Request data portability
Withdraw consent where processing is based on consent

Operational communications relating to your account or the Service may still be sent even if marketing consent is withdrawn.

Requests can be made by contacting
hello@territoryinsights.co.uk

11. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve our website and Service.

This includes tools such as Google Analytics and Mouseflow to understand usage patterns and improve user experience.

Further details are provided in our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated via email or within the Service with at least 30 days’ notice, where required.

Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle personal data, contact:

Territory Insights Ltd

Email: hello@territoryinsights.co.uk

Phone: 02045 380 809