Privacy Policy
Last updated: 4 August 2026
Introduction
This Privacy Policy explains how sage-stoat collects, uses, and protects personal information provided through our website and consultancy services. We are committed to safeguarding your privacy and handling your data responsibly in accordance with UK data protection legislation.
Information We Collect
We collect and process the following categories of personal information:
- Contact details including name and email address when you submit enquiry forms
- Information about your benefit or pension situation that you provide during consultations
- Technical data such as IP address, browser type, and device information when you visit our website
- Communication records including emails and consultation notes
How We Use Your Information
We use personal information for the following purposes:
- Providing consultancy services and responding to your enquiries
- Assessing your eligibility for various benefit programmes
- Preparing and submitting applications on your behalf
- Communicating with you about your case and our services
- Improving our website functionality and user experience
- Complying with legal obligations and professional standards
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contractual necessity: to provide the consultancy services you have requested
- Legitimate interests: to operate our business effectively and improve our services
- Legal obligation: to comply with regulatory requirements and tax legislation
- Consent: where you have explicitly agreed to specific uses of your data
Data Sharing
We may share your information with:
- Government departments including DWP and HMRC when submitting applications on your behalf
- Medical professionals or other third parties where necessary to obtain supporting evidence
- Professional advisors including accountants and legal counsel
- Service providers who assist with IT systems and office functions under strict confidentiality agreements
We do not sell or rent personal information to third parties for marketing purposes.
Data Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, or destruction. These measures include encrypted data transmission, secure server environments, and restricted access to client files.
Data Retention
We retain client records for seven years following the conclusion of your case, in accordance with professional practice standards. Website enquiry data is retained for two years unless you request earlier deletion.
Your Rights
Under UK data protection law, you have the following rights:
- Right to access: you can request copies of your personal data
- Right to rectification: you can request correction of inaccurate information
- Right to erasure: you can request deletion of your data in certain circumstances
- Right to restriction: you can request limitation of how we process your data
- Right to object: you can object to processing based on legitimate interests
- Right to data portability: you can request transfer of your data to another provider
Cookies
Our website uses essential cookies to ensure basic functionality. We do not use advertising or tracking cookies. For detailed information, please see our Cookie Policy.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify clients of material changes by email where appropriate.
Contact Information
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:
sage-stoat
47 Colmore Row
Birmingham
B3 2BS
United Kingdom
Email: [email protected]