Legal
Data Processing Information
Last updated: July 2026
This document provides information about how GarthysWorld processes personal data in connection with the Business Hub and associated services, in accordance with UK GDPR and the Data Protection Act 2018.
1. Data controller
GarthysWorld is the data controller for personal data processed in connection with our website and services. Contact: [email protected].
2. Categories of data processed
We process the following categories of personal data: identity data (name, username); contact data (email address, phone number); account data (login credentials, preferences); usage data (platform activity, token usage, feature interactions); communications data (messages, support tickets, project notes); and payment data (processed by our payment provider — we do not store card details).
3. Purposes and legal bases
We process personal data to: (a) provide and manage our services — legal basis: contract; (b) comply with legal obligations — legal basis: legal obligation; (c) improve our platform and services — legal basis: legitimate interests; (d) send service communications — legal basis: contract or legitimate interests; (e) send marketing communications — legal basis: consent (where obtained).
4. Data processors
We use trusted third-party data processors to help deliver our services, including cloud hosting providers, payment processors, email service providers, and AI service providers. All processors are bound by appropriate data processing agreements.
5. International transfers
Some of our data processors may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy decisions or standard contractual clauses.
6. Retention periods
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal and regulatory requirements. Business Hub account data is retained for the duration of the account plus 12 months after closure. Financial records are retained for 7 years in accordance with HMRC requirements.
7. Your rights
Under UK GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Contact
For data protection queries, please contact us at [email protected].