Privacy notice

Squarely is a UK business and the data controller for the processing described in this notice. We build account intelligence for UK B2B sales teams from public sources — the Companies House register, other official public registers, and information businesses publish about themselves.

You can contact us about anything in this notice at privacy@squarely.cloud.

If you use Squarely (you or your employer hold an account): your name, work email address, account and authentication details, records of how the service is used, and anything you send us in a demo request.

If you appear in our business data, we may hold work-role information about you, such as:

• your name and your role or connection to a company — for example as a director, officer or person with significant control, as recorded on the Companies House register (which can include partial date of birth, service address, nationality, occupation and appointment history, because the register itself publishes these);
• business contact details your company has published — for example a work email address, job title or office phone number shown on your company’s own website;
• information from other official public registers, which can include regulatory matters the register exists to publish — for example the register of disqualified directors.

We do not collect special-category data (such as health, beliefs or ethnicity), and we do not seek out personal or home-life information. Our product is about companies; individuals appear only in their business roles.

Everything in our business data comes from public sources:

• Official public registers — principally Companies House, and other UK government and regulatory registers that publish company and business information.
• Information businesses publish about themselves — their own websites and other public pages.

We record the source and date of every fact we hold, so we can tell you exactly where any piece of information about you came from. We do not buy private datasets, and we do not collect data from sources that hide where their data originates.

Account-holder data comes directly from you when you sign up and use the service.

We process work-role information about individuals on the basis of legitimate interests (Article 6(1)(f) UK GDPR): enabling businesses to identify and understand the right organisations and decision-makers, which is an established commercial use. We have weighed this interest against the rights and reasonable expectations of the people concerned, and we limit what we hold to work-role information that is relevant to that purpose and was already public. You can object to this processing at any time — see Your rights below, or go straight to our data removal page.

Where we hold information from official registers that record regulatory matters (such as director disqualifications), we hold it because the register publishes it for exactly this kind of use, and we present it only as the register states it, with its source shown.

For account holders, we process your data to perform our contract with you and to operate, secure and improve the service.

• Public-register information is held while it remains on the public source, and is refreshed from that source — so what we show tracks what the register says.
• Business-published information (such as contact details from a company website) is held only while it remains relevant, and is refreshed or removed as the public source changes.
• Account data is kept for the life of the account plus a limited period afterwards.
• Suppression records: if you ask to be removed, we keep a minimal identifier permanently, so our systems recognise you and skip you in any future collection. That record exists only to honour your request.

We share data with:

• Our customers, who use Squarely’s account intelligence for their own B2B activity under our terms.
• Our service providers — hosting, database, authentication, email and analytics providers who process data on our behalf under contract, and an AI provider we use to generate report narratives.

We do not sell access to a standing database of individuals as a product in itself, and one customer’s private data is never visible to another.

Some of our service providers are based outside the UK. Where personal data is transferred internationally, we rely on the safeguards required by UK data-protection law, such as the UK’s approved data-transfer agreements.

You have the right to:

• access the data we hold about you;
• correct it if it is wrong;
• have it erased;
• object to our processing of it;
• restrict how we process it.

The quickest way to exercise the removal and objection rights is our data removal page. For anything else, email privacy@squarely.cloud. We don’t charge for any of this, and you don’t need an account.

If you are unhappy with how we have handled your data, contact us at privacy@squarely.cloud and we will acknowledge your complaint within 30 days. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

If your information appears in our data and you want it removed, ask us at our data removal page or by emailing privacy@squarely.cloud. We will:

• locate every record that matches the details you give us;
• remove the values we hold, and keep a record that the removal happened;
• add a minimal, hashed identifier to a permanent suppression list, so you are not collected again in future;
• confirm by email once it’s done.