Privacy Policy

Last Updated: September 29, 2026

Introduction

Canopy-stag Limited ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and safeguard your information when you use our website and services.

Information We Collect

Information You Provide

When you request our services or contact us, we collect:

• Full name
• Email address
• Details about your card retention incident
• Service preferences
• Any additional information you choose to provide

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website
• Date and time of access

How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your service requests
• Communicating with you about your case
• Coordinating with ATM operators and banking institutions on your behalf
• Improving our services and website functionality
• Responding to your inquiries
• Complying with legal obligations
• Preventing fraud and maintaining security

Legal Basis for Processing

We process your personal data based on:

• Contractual necessity: Processing is necessary to provide the services you requested
• Consent: You have given explicit consent for specific processing activities
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal obligations: Processing is required to comply with legal requirements

Data Sharing and Disclosure

We may share your information with:

• ATM operators: To facilitate card recovery on your behalf
• Banking institutions: When coordinating replacement card services
• Service providers: Third-party vendors who assist in operating our business
• Legal authorities: When required by law or to protect our rights

We do not sell your personal information to third parties for marketing purposes.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Service request data: Retained for 3 years after case completion
• Communication records: Retained for 2 years
• Website usage data: Retained for 12 months

Your Rights

Under data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission using SSL/TLS protocols
• Secure storage systems with access controls
• Regular security assessments
• Employee training on data protection

Cookies

Our website uses cookies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date.

Contact Information

If you have questions about this privacy policy or our data practices, please contact us:

Email: [email protected]
Address: 42 Kingsway Terrace, Birmingham, B15 3TN, United Kingdom

Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113