Privacy notice

1. Who is responsible for your information?

Revenue Blindspot is a trading name used by Jordan Humphrey. Jordan Humphrey trading as Revenue Blindspot is the controller responsible for personal information used for the business's own purposes.

2. Information that may be collected

Depending on how you interact with Revenue Blindspot, this may include:

• Your name, job title, employer and business contact details.
• Information submitted when you make an enquiry or book a meeting.
• Emails, call notes, meeting notes and other business correspondence.
• Information about your organisation, sales process and requirements.
• Contract, invoice and payment-status information.
• Publicly available professional information used for relevant business outreach.
• Client-provided audit evidence, which may include CRM records, calls, messages and sales-process information.
• Limited technical information used to operate and protect the website, such as access and security logs.

3. How information is collected

Information may be collected:

• Directly from you by email, telephone, meeting, contract or during delivery of a service.
• Through the HubSpot meeting-booking service linked from this website.
• From your employer or another person involved in a potential or active engagement.
• From public business sources, including company websites, professional profiles, Companies House, online directories and marketplace listings.

4. Why information is used

Where legitimate interests are used, Revenue Blindspot considers whether the use is necessary, proportionate and reasonably expected. You can object to the use of your personal information for direct marketing at any time.

You are not legally required to provide information when making an enquiry or booking a meeting. Without basic contact and booking details, however, Revenue Blindspot may be unable to respond or arrange the requested meeting. Revenue Blindspot does not use solely automated decision-making that has a legal or similarly significant effect on people.

5. Client audit information

An audit may require access to limited customer, prospect or employee information. The client normally decides why and how this information is used. For client-supplied audit evidence, Revenue Blindspot will normally act as the client's processor and handle it only for the documented audit purpose under the relevant contract and data-processing terms.

Revenue Blindspot remains an independent controller for its own business administration, professional conclusions, service security, legal obligations and the establishment or defence of legal claims. The engagement contract records the roles that apply to the actual service.

Clients are asked to provide only the minimum information needed and to redact or pseudonymise it where practical. Payment-card data, identity documents, special-category information and unrelated employee data should not be provided unless specifically necessary, lawful and agreed.

6. Who information may be shared with

Information may be shared only where reasonably necessary with:

Revenue Blindspot does not sell personal information. Service providers are required to protect information and use it only for the services they provide. Supplier arrangements are reviewed and this list will be updated if a material provider changes.

7. International processing

Some technology providers may process information outside the United Kingdom. Where this happens, appropriate safeguards are required, such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or another legally recognised transfer mechanism. Provider security and transfer information is reviewed as part of supplier selection.

8. How long information is kept

• Unsuccessful enquiry and prospect records are normally deleted or anonymised within 24 months of the last substantive interaction, with an earlier review where the information is no longer relevant.
• A minimal suppression record may be retained for as long as needed so that an opt-out or objection continues to be respected.
• Audit working evidence is normally securely deleted within 30 days after the final presentation unless another period is agreed in writing.
• Core client, contract, invoice and tax records are normally kept for six years after the relevant relationship or financial period ends, unless a different legal period applies.

9. Your rights

Depending on the circumstances, you may have the right to:

• Ask for a copy of your personal information.
• Ask for inaccurate or incomplete information to be corrected.
• Ask for information to be deleted or its use restricted.
• Object to processing based on legitimate interests.
• Object at any time to the use of your information for direct marketing.
• Withdraw consent where consent is the lawful basis.
• Ask for certain information in a portable format.

To exercise a right, email hello@revenueblindspot.co.uk. Reasonable information may be requested to confirm your identity before a request is completed.

10. Business outreach

Revenue Blindspot may contact relevant businesses and business contacts about services that reasonably relate to their role or organisation. Messages identify Revenue Blindspot and provide a straightforward way to opt out.

If you ask not to receive further marketing, your details will be added to a suppression list. You can object by replying to a message or emailing hello@revenueblindspot.co.uk. Where contact details came from a public or third-party source, this notice will be provided no later than the first communication unless you already have the relevant information or a lawful exception applies.

11. Website technology and external services

This website uses one strictly necessary security cookie. It does not currently use optional analytics, advertising, social-media or personalisation cookies, so no consent banner is shown. If optional technology is introduced, it will be blocked until any consent required by law has been obtained.

Meeting-booking links open HubSpot. Jordan Humphrey trading as Revenue Blindspot remains responsible for using the name, email address, booking details and message you provide to arrange and follow up the meeting. HubSpot processes those details as a service provider and also publishes its own privacy information. Booking a meeting does not by itself opt you into optional marketing. Other external websites are responsible for their own privacy practices.

12. Data protection complaints

To raise a data protection complaint, email hello@revenueblindspot.co.ukwith the subject “Data protection complaint”. Revenue Blindspot will acknowledge the complaint within 30 days, take appropriate steps to investigate it without undue delay, keep you informed where the investigation is continuing, and tell you the outcome in writing.

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection. Visit ico.org.uk/make-a-complaint.

13. Changes to this notice

This notice is reviewed at least annually and whenever services, suppliers, legal requirements or uses of personal information change. Material new uses will be brought to affected people's attention before they begin where required.

The latest version will always be published on this page.