Legal
Privacy notice
What we collect when you ask for an audit, why we hold it, how long we keep it and how to get it removed.
Last updated September 2026
Who we are
ABCA Solutions Ltd (“ABCA”, “we”) is the data controller for the information described in this notice. We are registered in England & Wales under company number 14554940 and are registered with the Information Commissioner’s Office as a data controller.
For any privacy question, or to exercise any of the rights below, email abcasolutionsltd@gmail.com or call +44 7988 474189.
What we collect
- Contact and business details — your name, business name, email address, phone number, postcode, sector and number of sites, from the audit request form.
- Billing documents — merchant statements, energy bills, telecoms invoices, bank statements, policy schedules and finance agreements that you choose to send us.
- Correspondence — emails, messages and call notes relating to your audit.
- Technical data — IP address and basic request information, recorded briefly to rate-limit the contact form and prevent abuse.
Why we use it, and our lawful basis
- To produce your audit — necessary for steps taken at your request before entering a contract, and for our legitimate interest in operating the service.
- To obtain quotations from suppliers on your behalf — only where you have asked us to, and only the details that supplier needs.
- To remind you of renewal dates — our legitimate interest in maintaining the client relationship. You can opt out at any time.
- To meet legal and accounting obligations — compliance with a legal obligation.
Who we share it with
We do not sell your data. We share it only with: suppliers and providers you have asked us to obtain quotations from; authorised firms where you have asked for an introduction on insurance or finance; and our service providers (email delivery, cloud storage, accounting), who process data on our instructions only. Where an authorised firm takes your details, they become a controller of that data and their own privacy notice applies.
Where it is stored
Documents are held in access-controlled, encrypted storage. They are readable by the consultant working on your audit and by nobody else. We do not store billing documents in shared drives or public buckets. Where a processor operates outside the UK, transfers rely on UK adequacy regulations or the International Data Transfer Addendum.
How long we keep it
- Billing documents you send us: deleted 12 months after your audit is issued, or sooner on request.
- The audit report and the contact details attached to it: 6 years, to support renewal reminders and to meet accounting obligations.
- Enquiries that do not become audits: 12 months.
- Form rate-limiting data: minutes.
Your rights
You have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive your data in a portable format. Contact us using the details above; we respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would appreciate the chance to put it right first.
Cookies
See our cookie notice for what this site stores in your browser.