Privacy Notice.
Who we are
This site is operated by Modular Consultancy Ltd (Company No. 13055378), an independent payments consultancy and the data controller for personal information collected through this website. Registered office: Flat 7 Reigate Court, Reigate Road, Worthing BN11 5LD. Trading office: 1st Floor Suite, 109 Shirland Road, London W9 2EL. For any privacy question or request, contact audit@modularconsultancy.com.
What we collect
When you request a free payment audit, we collect the details you enter into the form: your full name, job title, mobile number and email address; and your business details — trading name, limited company name, website, business category, number of outlets, location, current payment provider, current EPOS provider, approximate monthly card turnover and contract renewal date.
If you choose to upload a merchant statement, we also collect that document and its contents. A merchant statement can contain commercially sensitive information about your card transactions and fees. Please upload statements only, and avoid including unrelated personal or banking information.
We also automatically receive a small amount of technical information with every form submission, including your IP address, the date and time, and the page the form was sent from. This is collected by our hosting provider as a standard part of processing the submission. We use it only to protect the forms from abuse and fraudulent enquiries, on the basis of our legitimate interest in keeping the service secure, and we delete it along with your enquiry.
Why we use it, and our lawful basis
We use this information solely to review your current payment arrangements, prepare your payment cost audit (your "Payment Profile") and respond to you. Our lawful basis is our legitimate interest in providing the audit you have asked for, and taking steps at your request before any engagement. We do not use your information for unrelated marketing without your consent, and we never sell it.
Referral partners
If you apply to join our referral partner programme, we collect the details you enter into the sign-up form: your name, role, email address and phone number, your business type, the kinds of clients you work with, how many introductions you expect to make, and any message you add. We use this to assess your application, set you up as a partner and stay in touch with you about the programme. Our lawful basis is our legitimate interest in operating the programme and taking steps at your request before any agreement, together with your consent where you have given it for us to contact you.
If you are a partner referring a client to us, we collect the client details you provide: the business name, your contact’s name, role, email address and phone number, the sector, number of locations, current provider, approximate monthly card turnover, and any notes or statement you upload. We also record your Partner ID so the introduction is credited to you.
Because these details come from the partner rather than from the client directly, we ask every partner to confirm they have the client’s permission before submitting them. When we first contact a referred client we tell them who introduced us and how we obtained their details, and they can ask us to delete their information at any time. Our lawful basis for handling a referral is our legitimate interest in responding to a business introduction made with the client’s knowledge.
How your information is handled, and who processes it
We use a small number of trusted service providers ("processors") to run the form and upload:
- Uploadcare — securely receives and stores any statement you upload; the file is sent directly from your browser to Uploadcare's storage.
- Netlify — hosts this website and processes the form submission (your enquiry details and a secure link to any uploaded statement).
- Our email provider — delivers your submission to our business mailbox so we can act on it.
These providers act on our instructions. Some are based outside the UK, so your information may be transferred internationally; where that happens we rely on appropriate safeguards such as UK/EU-approved standard contractual clauses or an adequacy decision.
How long we keep it
We keep your enquiry and any uploaded statement only as long as needed to prepare and discuss your audit, and then delete the statement. If you ask us to delete your information sooner, we will do so unless we are legally required to keep it.
Your rights
Under UK data protection law you have the right to access, correct, delete or restrict the use of your personal information, to object to certain processing, and to data portability. To exercise any of these, email audit@modularconsultancy.com. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes
We may update this notice as our services change. The current version is always the one published on this page.