Privacy Policy.

1. Introduction

This Privacy Policy explains how Data Menu Limited (“Data Menu,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects personal information when you use our website, submit an enquiry, complete a lead form, contact us, or interact with our services.

Data Menu operates online enquiry and lead-generation services. This means that, where you choose to submit your details and give the relevant consent, we may share your enquiry information with selected third-party partners who may be able to contact you about the product, service, quote, advice, or information you requested.

This Privacy Policy should be read together with the consent wording displayed on the specific form you submit. If there is a difference between this Privacy Policy and the specific consent wording shown on a form, the form wording explains the specific sharing that applies to that enquiry.

2. Who we are

Data Menu Limited is responsible for the personal information we collect and use through this website, except where another organisation acts as an independent controller of your data after receiving it from us with your consent.

3. Information we collect

The personal information we collect depends on how you use our website and which forms or services you interact with.

• Contact details — such as your name, email address, telephone number, postcode, location, business name, and any contact preferences you provide.
• Lead form details — information you submit through enquiry forms, including details about the product or service you are interested in, your requirements, budget, timescale, eligibility information, property details, business details, insurance needs, finance needs, legal service interests, or other enquiry-specific information.
• Consent records — including the consent checkboxes you selected, the consent wording shown to you, consent version, page URL, date and time of submission, and related audit information.
• Technical and audit data — such as IP address, browser type, device type, operating system, user agent, referring page, pages visited, form submission time, and website activity.
• Communications — information you provide when you email us, use a contact form, respond to communications, or otherwise contact Data Menu.
• Account or transaction data — where applicable, information associated with accounts, purchases, subscriptions, orders, unlocked items, payment status, and related service activity.

Some enquiry forms may relate to areas such as finance, insurance, property, legal services, healthcare cover, later-life lending, business finance, home improvements, or other specialist services. You should only submit information that you are comfortable sharing for the purposes described on the relevant form.

4. How we collect information

• When you complete and submit a form on our website.
• When you give consent for us to share an enquiry.
• When you contact us by email or through a contact form.
• When you browse or interact with our website.
• When our systems create technical logs, audit records, consent records, and fraud-prevention records.
• From selected service providers, analytics tools, hosting providers, payment providers, CRM tools, email systems, or other operational software used to run our services.

5. How we use your information

We may use your personal information for the following purposes:

• To receive, process, and respond to enquiries.
• To match your enquiry with relevant selected partners, suppliers, providers, brokers, advisers, installers, specialists, or service companies.
• To share your enquiry details with selected partners where you have submitted a form and consented to such sharing.
• To allow selected partners to contact you about the specific product, service, quote, advice, or enquiry you requested.
• To operate lead-generation, referral, introduction, marketing, and enquiry-routing services.
• To send confirmations, administrative messages, service updates, and communications relating to your enquiry.
• To send marketing communications where permitted by law and where we have the appropriate consent or lawful basis.
• To maintain records of consent, including the wording shown at the time of submission.
• To protect our business, website, users, partners, and systems from spam, fraud, misuse, security threats, and unlawful activity.
• To analyse website performance, form performance, enquiry performance, commercial performance, and marketing effectiveness.
• To improve our website, services, forms, user experience, targeting, routing logic, partner selection, and operational processes.
• To comply with legal obligations, regulatory obligations, accounting requirements, tax requirements, dispute resolution, complaints handling, and enforcement of our rights.

6. Lead generation, introductions, and partner sharing

Data Menu operates enquiry-routing and lead-generation services. When you submit a lead form, you are asking us to help connect your enquiry with relevant selected partners where available.

Depending on the form you submit, selected partners may include, for example, insurers, brokers, estate agents, property specialists, solar installers, boiler installers, heating engineers, will writers, solicitors, estate planning specialists, equity release advisers, later-life lending specialists, mortgage advisers, business finance brokers, lenders, funding platforms, or other relevant service providers.

Where you give consent, we may share the details you submit with selected partners so they can contact you about your specific enquiry. These partners may contact you by telephone, email, SMS, or other contact methods, depending on the details you provide, the consent wording shown, and applicable law.

Selected partners may pay Data Menu for introductions, enquiries, leads, referrals, marketing services, or related commercial services. You understand that this is part of Data Menu’s commercial model.

We do not sell your personal information as a general open marketing list. Where we share your enquiry details, we do so in connection with the specific enquiry you submitted and the consent wording shown on the relevant form.

Once your details have been shared with a selected partner, that partner may become an independent controller of your personal information. This means they may be responsible for how they use, store, contact you about, and respond to rights requests relating to the copy of your data they hold. If you wish to stop contact from a partner who has already received your details, you may need to contact that partner directly as well as contacting Data Menu.

7. Lawful bases for processing

We rely on different lawful bases depending on the activity. These may include:

• Consent — where you actively agree to us sharing your enquiry details with selected partners or to receiving certain marketing communications.
• Legitimate interests — where necessary for operating and improving our business, preventing fraud, securing our website, handling enquiries, maintaining business records, and managing commercial relationships, provided your rights do not override those interests.
• Contract — where processing is necessary to provide a service you requested or to take steps before entering into a contract.
• Legal obligation — where we need to comply with applicable law, tax, accounting, regulatory, or legal process requirements.

Where we rely on consent, you may withdraw that consent. However, withdrawing consent does not automatically make earlier processing unlawful, and it may not remove copies of your information already lawfully shared with selected partners before your withdrawal request was received or actioned.

8. Marketing communications

We may send marketing communications where permitted by law, including where you have consented or where another lawful basis applies. Marketing may relate to Data Menu services, partner services, relevant offers, updates, or similar products and services.

You can opt out of Data Menu marketing by emailing corporate@datamenu.co.uk. We will handle opt-out and rights requests in accordance with applicable data protection laws.

If your information has already been shared with a selected partner, that partner may still contact you where they have received your details lawfully and have their own lawful basis to do so. To stop contact from that partner, you should also use the unsubscribe or opt-out method provided by that partner, or contact them directly.

9. Who we share information with

We may share personal information with the following categories of recipients:

• Selected enquiry partners — relevant partners, suppliers, providers, brokers, advisers, installers, specialists, agencies, lenders, or service companies who may contact you about your specific enquiry.
• Commercial lead buyers or referral partners — organisations that may pay Data Menu for introductions, enquiries, leads, referrals, or related marketing services, where sharing is consistent with the consent wording shown to you and applicable law.
• Technology and hosting providers — providers of website hosting, databases, cloud infrastructure, analytics, security, storage, monitoring, and operational tools.
• Email and communication providers — providers used to send notifications, confirmations, marketing messages, or operational emails.
• Payment and transaction providers — where payments, subscriptions, purchases, or paid services are involved.
• Professional advisers — lawyers, accountants, auditors, insurers, consultants, compliance advisers, and other professional service providers.
• Authorities and legal recipients — courts, regulators, law enforcement, public authorities, or other parties where required or permitted by law.
• Business transfer parties — potential or actual buyers, investors, successors, or restructuring parties if we sell, transfer, restructure, merge, finance, or reorganise all or part of our business or assets.

10. Partner responsibility after sharing

Where we share your enquiry details with a selected partner, that partner may use your information to contact you, assess your enquiry, provide information, offer quotes, check eligibility, discuss services, or provide advice depending on the nature of your request.

Selected partners are expected to handle personal information in accordance with applicable data protection and marketing laws. However, once a partner receives your information, Data Menu does not control every aspect of that partner’s processing, communications, systems, retention periods, or decisions.

If you have concerns about how a partner uses your information, you should contact that partner directly. You may also contact Data Menu and we may, where reasonable and appropriate, help identify the partner or provide information about the sharing that occurred.

11. Special category or sensitive information

Some forms may relate to topics that could reveal sensitive or private circumstances, such as health insurance interests, financial needs, later-life lending, legal planning, family circumstances, property ownership, debt repayment, care needs, or similar matters.

You should not provide sensitive information unless it is relevant to your enquiry and you are comfortable with it being processed for the purposes described on the form and in this Privacy Policy.

Where information is considered special category data or requires additional protection under applicable law, we will only process it where we have an appropriate lawful basis and condition, where necessary, or where you have provided explicit consent where required.

12. Data accuracy

You are responsible for ensuring that the information you submit is accurate, complete, and not misleading. If you submit someone else’s personal information, you confirm that you have authority to do so and that you have made them aware of this Privacy Policy.

We may not be able to process your enquiry correctly if the details you provide are inaccurate or incomplete.

13. Cookies, analytics, and tracking

We may use cookies, pixels, analytics tools, tracking technologies, log files, and similar technologies to operate our website, understand user behaviour, measure marketing performance, prevent fraud, improve our services, and support advertising or retargeting activity.

These technologies may collect information such as IP address, device type, browser type, pages viewed, links clicked, session activity, approximate location, referral source, and form interaction data.

Where required, we will request consent for non-essential cookies or similar technologies. You may also manage cookies through your browser settings.

14. How long we keep information

We keep personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including enquiry handling, partner sharing records, consent evidence, fraud prevention, legal compliance, accounting, reporting, dispute handling, and business protection.

Lead and consent records may be retained where necessary to evidence what was submitted, when it was submitted, what consent was given, which form was used, which partner category applied, and how the enquiry was handled.

Retention periods may vary depending on the type of data, the nature of the enquiry, legal requirements, partner arrangements, complaint risk, and operational needs.

15. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These measures may include secure hosting, access controls, database protections, audit records, encrypted connections, security monitoring, restricted administrative access, and provider due diligence where appropriate.

No website, database, email system, or internet transmission can be guaranteed to be completely secure. You submit information at your own risk, and you should only submit information that is necessary for your enquiry.

16. International transfers

Some of our service providers, technology providers, email providers, analytics providers, or selected partners may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take steps intended to ensure that appropriate safeguards are in place where required by applicable data protection laws.

17. Your rights

Depending on the circumstances and applicable law, you may have rights to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Request restriction of certain processing activities.
• Object to certain processing, including direct marketing.
• Withdraw consent where processing is based on consent.
• Request transfer of certain information to another provider.
• Complain to the UK Information Commissioner’s Office if you are unhappy with how your data is handled.

These rights are not absolute and may be subject to legal exceptions. For example, we may need to retain certain records to comply with legal obligations, resolve disputes, prevent fraud, or evidence consent and enquiry handling.

18. Opting out and withdrawing consent

You can opt out of Data Menu marketing or withdraw consent for future Data Menu processing by emailing corporate@datamenu.co.uk.

Please include enough information for us to identify your record, such as your name, email address, phone number, enquiry type, and the approximate date you submitted the form.

We will handle opt-out, withdrawal, objection, access, deletion, and other rights requests in accordance with applicable data protection laws. We may need to verify your identity before actioning certain requests.

If your data has already been shared with a selected partner before your opt-out or withdrawal request is received or actioned, that partner may already hold a copy of your information. In that case, the partner may continue to contact you where they have a lawful basis to do so. You should contact that partner directly to opt out of their communications or exercise rights in relation to the copy of your data they hold.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

19. Complaints

If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office. More information is available at ico.org.uk.

20. Children

Our website and lead-generation services are not intended for children. You must not submit personal information through our website if you are under 18.

If we believe that a child has submitted personal information, we may delete it or take other appropriate steps.

21. Automated processing and profiling

We may use automated systems, rules, filters, scoring, routing logic, or matching processes to help assess which partners, categories, services, or destinations may be relevant to an enquiry.

This may involve using information such as enquiry type, postcode, location, selected options, timescale, budget, eligibility answers, or service requirements. This helps us route enquiries efficiently and improve the relevance of partner contact.

We do not intend to make solely automated decisions that produce legal or similarly significant effects about you without appropriate safeguards where required by law.

22. Business transfers

If Data Menu Limited is involved in a merger, acquisition, restructuring, investment, financing, sale of assets, sale of business, insolvency process, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, partner arrangements, or business practices.

The updated version will be posted on this page with a revised “Last updated” date. You should review this page periodically.

24. Contact us

If you have questions about this Privacy Policy, want to opt out, withdraw consent, or exercise your data protection rights, contact us at: