Effective Date: 24.07.2026
At sterling-experts.co.uk (“we”, “our”, or “the Platform”), we recognise the importance of protecting the personal information of every visitor and user. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal data whenever you access or use our website and services. We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other applicable legislation governing the protection of personal data within the United Kingdom.
By using our Platform, you acknowledge that you have read and understood the practices described in this Privacy Policy.
1. Information We Collect
When you use sterling-experts.co.uk, we may collect different categories of personal information depending on how you interact with our Platform.
Information you choose to provide may include:
- Your full name and telephone number.
- Your email address and any additional contact information you voluntarily provide.
- Communications exchanged with our customer support team.
- Files, documents, or other materials uploaded through our Platform.
- Payment-related information required to complete transactions through secure payment providers.
In addition to the information you actively submit, we automatically collect certain technical and usage information whenever you browse our website. This may include:
- Your IP address, browser type, operating system, and device identifiers.
- Information about how you navigate our website, including the pages you visit, the time spent on each page, and your interactions with website features.
- Information regarding referral sources, including whether you accessed our website through search engines, advertisements, partner websites, or direct links.
This information enables us to operate our Platform efficiently, maintain website security, improve user experience, and identify technical issues when they arise.
We take reasonable and appropriate measures to ensure that all personal information is processed securely and only for legitimate purposes.
2. How We Use Your Data
The information we collect is used solely for purposes that support the operation and improvement of our Platform. Your personal information may be processed to:
- provide editing, proofreading, reviewing, and learning support requested through our website;
- manage your requests and respond to enquiries;
- facilitate secure payment processing using trusted third-party payment providers;
- improve the design, functionality, accessibility, and performance of our website;
- communicate important updates regarding our Platform or the services you request;
- send promotional communications where you have provided your consent to receive them;
- detect, investigate, and prevent fraudulent activity, misuse of the Platform, or breaches of our Terms and Conditions;
- comply with legal and regulatory obligations applicable under UK law.
Any personal data we collect is processed responsibly to enhance the quality, reliability, and security of the services we provide.
3. Legal Basis for Processing Personal Information
Whenever we process personal information, we do so on one or more lawful grounds recognised under the UK GDPR.
- Performance of a Contract: Where processing is necessary to provide the services you request, fulfil our contractual obligations, process payments, or communicate regarding your use of the Platform.
- Consent: Where required by law, we rely on your freely given consent before sending promotional communications or processing information for optional purposes. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Compliance with Legal Obligations: Certain information may be processed where necessary to comply with applicable legislation, regulatory requirements, taxation obligations, fraud prevention measures, or requests from competent public authorities.
- Legitimate Interests: We may process personal data where doing so is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms. These interests include maintaining website security, improving our services, resolving technical issues, preventing misuse of our Platform, analysing website performance, and enhancing the overall user experience.
Whenever legitimate interests are relied upon, we carefully assess the balance between our operational needs and your privacy rights to ensure that your personal information receives appropriate protection.
4. Sharing Information with Third-Party Partners
To operate our Platform effectively and provide our services, we may share limited personal information with carefully selected third parties where this is necessary and appropriate. We only disclose information that is relevant for the intended purpose and require all recipients to protect it in accordance with applicable data protection laws.
Your personal information may be shared with tutors and editors engaged through our Platform where access to your information is necessary to provide the requested guidance or support; trusted payment service providers responsible for securely processing financial transactions; providers of email, messaging, cloud hosting, and other communication services that assist us in operating our Platform; analytics and website performance providers that help us understand how visitors use our website and identify opportunities for improvement.
Each third party that processes personal information on our behalf is required to maintain appropriate security measures and to process personal data only in accordance with our instructions and applicable UK data protection legislation. We do not sell, trade, or rent your personal information to third parties for marketing purposes.
5. International Transfers of Data
Some of the organisations that assist us in providing our services may process personal information outside the United Kingdom. Whenever personal data is transferred internationally, we ensure that appropriate safeguards are implemented to maintain a level of protection equivalent to that required under UK data protection legislation.
These safeguards may include the use of the International Data Transfer Agreement (IDTA) or other transfer mechanisms recognised under UK GDPR; the UK Addendum to the European Commission’s Standard Contractual Clauses where appropriate; transfers to countries that have been recognised by the UK Government as providing an adequate level of protection for personal information; or additional technical and organisational security measures designed to protect transferred data.
6. Data Storage Duration
We retain personal information only for as long as it is reasonably necessary to fulfil the purposes described in this Privacy Policy or to comply with legal and regulatory obligations.
The length of time for which information is retained depends on factors such as the nature of the services provided, contractual requirements, applicable legal obligations, tax and accounting requirements, dispute resolution, fraud prevention, and the protection of our legal rights.
Where there is no continuing legal or business need to retain the associated information, we generally delete or securely anonymise personal data after approximately four years, unless a longer retention period is required by law or is necessary to establish, exercise, or defend legal claims. When information is no longer required, we ensure that it is securely deleted, anonymised, or otherwise disposed of using appropriate technical and organisational measures.
7. Data Protection Rights of UK Residents
If you are located within the United Kingdom, you benefit from a number of rights under the UK General Data Protection Regulation and the Data Protection Act 2018. Subject to applicable legal conditions, these rights include the ability to request access to the personal information we hold about you; ask us to correct inaccurate or incomplete personal data; request the deletion of your personal information in certain circumstances; request that we restrict the way we process your information; object to certain types of data processing carried out on the basis of legitimate interests; receive a copy of personal data in a structured, commonly used, and machine-readable format where applicable; withdraw your consent whenever processing relies upon consent; and submit a complaint to the Information Commissioner’s Office (ICO) if you believe your personal information has been handled unlawfully.
We will respond to requests concerning your privacy rights within the timeframes required by applicable law. Before fulfilling certain requests, we may ask you to verify your identity to protect your personal information from unauthorised access.
8. Your Rights as a Data Subject
We are committed to ensuring that you can exercise your rights regarding your personal information in accordance with applicable UK data protection legislation.
Subject to the conditions set out in the UK GDPR and the Data Protection Act 2018, you may have the right to:
- obtain confirmation of whether we process your personal information and request access to that information;
- request the correction of inaccurate, incomplete, or outdated personal data;
- ask for your personal information to be erased where there is no lawful reason for us to continue processing it;
- request restrictions on the processing of your information in certain circumstances;
- object to processing carried out on the basis of our legitimate interests where appropriate;
- withdraw any consent you have previously provided for optional processing activities;
- request the transfer of your personal information in a structured, commonly used, and machine-readable format where the right to data portability applies;
- submit concerns or complaints to the appropriate supervisory authority if you believe your rights have not been respected.
9. Security of Personal Information
Protecting your personal information is one of our highest priorities. We maintain a combination of technical, organisational, and administrative safeguards designed to reduce the risk of unauthorised access, disclosure, alteration, or destruction of personal data.
Our security measures include encryption technologies that help protect personal information during transmission and storage, secure hosting environments and network monitoring systems, restricted access to personal information based on authorised roles and business needs, authentication procedures that help prevent unauthorised access to administrative systems, routine monitoring of our systems to identify potential vulnerabilities, and regular reviews of our internal security practices and operational procedures.
Although we make every reasonable effort to safeguard personal information, no method of transmitting information over the internet or storing electronic data can be guaranteed to be completely secure. For this reason, while we strive to apply industry-recognised security standards, we cannot guarantee absolute security in every circumstance.
10. Contact Information
If you have any questions about this Privacy Policy, the way we process your personal information, or if you wish to exercise any of your rights under applicable data protection legislation, you are welcome to contact us.
Email: [email protected]
Our team will review your enquiry and respond as promptly as reasonably possible.