GDPR Compliance
Last updated: January 2026
Our Commitment to Data Protection
Company Explore is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take the protection of personal data seriously and have implemented appropriate measures to ensure compliance.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract: Processing necessary to provide our services to registered users
- Legitimate Interests: Business intelligence services using publicly available company data
- Consent: Where we send marketing communications
- Legal Obligation: Where required by law
Public Interest & Company Data
The company and director information displayed on Company Explore is sourced from Companies House, a public registry. This data is made publicly available under the Companies Act 2006 to promote transparency in business. Our processing of this data serves the legitimate interest of facilitating due diligence, credit assessment, and business research.
Your Data Protection Rights
Right of Access
Request a copy of your personal data we hold
Right to Rectification
Request correction of inaccurate personal data
Right to Erasure
Request deletion of your personal data in certain circumstances
Right to Restriction
Request restriction of processing in certain circumstances
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests
Director Data Requests
Directors and officers whose information appears on our platform sourced from Companies House may request information about how their data is processed. Please note that data filed with Companies House is a matter of public record and we cannot remove it from our platform while it remains on the official register.
Data Security
We implement appropriate technical and organisational measures to protect personal data:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Incident response procedures
International Transfers
Where we transfer data outside the UK, we ensure appropriate safeguards are in place in compliance with UK GDPR, including Standard Contractual Clauses or transfers to countries with adequate protection.
Data Retention
We retain personal data only for as long as necessary. Account data is kept while your account is active. Company data from public registries is retained in accordance with our caching policies and updated regularly.
Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, if you believe your data protection rights have been violated.
ICO Website: ico.org.uk
ICO Helpline: 0303 123 1113
Contact Our Data Protection Team
For any data protection queries or to exercise your rights, please contact us at: dpo@companyexplore.co.uk