1. Overview

Dragonfly Associates Group Ltd (“we”, “us”, “our”) is committed to safeguarding your privacy and protecting any personal data that you provide when using our website, subscribing to services, or contacting us. This policy explains how we collect, use, store, and share your personal data, as well as your rights under applicable data-protection legislation.

2. Who This Policy Applies To

• Our website and services are not intended for children under 18; we do not knowingly collect personal data from minors.
  
  
• When you interact with us — whether as a client, service user, or website visitor — you are treated as a data subject.
  
  

If you provide data about another person (for example, a director, company secretary, or beneficial owner), you confirm that you have informed that person about this policy and obtained any required consent.

3. Definitions (Key Terms)

• Personal Data: any information that can directly or indirectly identify an individual (e.g. name, email, address, ID numbers).
  
  
• Special Category Data: sensitive data such as biometric data, scans, or other required identity-verification material.
  
  
• Aggregated / Anonymised Data: data that has been processed so that individuals cannot be identified — e.g. statistical reports.
  
  
• We / Us / Our: Dragonfly Associates Group Ltd (data controller).
  
  
• You / Your: any individual whose data we collect.
  
  

4. Data Controller Details

Dragonfly Associates Group Ltd acts as the data controller for all personal data collected via our services or website.

Contact details:
Dragonfly Associates Group Ltd
16 Stirling Road, Office 2c
London, W3 8DJ
Email: info@dragonflyassociates.co.uk

5. Our Data-Handling Principles

In line with data-protection laws (such as UK GDPR and the Data Protection Act), we ensure that your personal data is:

• Processed lawfully, fairly and transparently
  
  
• Collected for specified, legitimate purposes
  
  
• Adequate, relevant and limited to what is necessary for those purposes
  
  
• Accurate and kept up to date (you must notify us of changes)
  
  
• Retained only as long as necessary and disposed of securely thereafter
  
  
• Protected against unauthorised or unlawful processing, accidental loss or damage
  
  

6. What Data We May Collect

We may collect the following categories of personal data (as needed):

• Contact Data — names, email address, telephone number, billing/registered address
  
  
• Identity Data — first name, last name, date of birth, nationality, identity/passport numbers, citizenship
  
  
• Financial Data — payment-card or bank-account details (when you make payments)
  
  
• Transaction Data — records of services or products you order, payment histories
  
  
• Usage & Technical Data — IP address, browser type, device information, website-usage patterns, login details
  
  
• Profile & Account Data — service preferences, account username/password, communication preferences
  
  
• Public & External Data — data from public registries (e.g. company registers), and data from third-party sources (e.g. identity-verification providers)
  
  
• Special Category Data — where required for identity verification or anti-money-laundering / KYC compliance (e.g. biometric data or scanned ID documents)
  

In addition, we may collect aggregated or anonymised data (e.g. statistical metrics) which do not identify you personally.

7. How We Collect Your Data

We gather personal data in various ways:

• Directly from you — when you complete online forms, register for services, make enquiries, subscribe to our mailing list, or contact us via phone, email, or chat.
  
  
• Automatically — through website analytics, cookies, server logs and similar technologies whenever you browse or interact with our site.
  
  
• From public sources — public registries or publicly available databases.
  
  
• From third parties — payment processors, identity-verification providers, analytics/marketing tools, service partners, and other service providers we engage.
  
  
• Via communications — we may record and store telephone calls, emails, or other correspondence for record-keeping, staff training, fraud prevention, and customer service quality.
  
  

8. Why We Use Your Data (Purposes & Legal Bases)

We process personal data for a variety of purposes, and only when we have a valid legal basis, such as:

• To fulfil contracts with you (e.g. to register companies, provide services, process payments)
  
  
• To comply with legal obligations (e.g. anti-money-laundering, regulatory, accounting, tax or reporting duties)
  
  
• For our legitimate interests — such as ensuring website security, preventing fraud, administering accounts, improving services, and communicating with you — provided this does not unfairly impact your rights
  
  
• Where required, with your consent — for example, when sharing your data with a third party partner for referrals or marketing
  
  

Typical uses include:

• Registering you as a new customer
  
  
• Processing orders, payments and billing
  
  
• Setting up services (e.g. registered office, company formation, mail forwarding)
  
  
• Administering and operating our website, systems and IT infrastructure
  
  
• Communicating with you — about service updates, compliance notices, marketing (if you have not opted out)
  
  
• Conducting identity verification, KYC checks, fraud prevention
  
  
• Analysing and improving our services, website, and customer experience
  
  
• Enabling promotional offers, referral programs or surveys (with consent where required)
  
  

If we plan to use your data for a new purpose not covered when you provided it, we will inform you and — where required by law — obtain your consent before proceeding.

9. Marketing & Communication Preferences

• We may send you marketing or promotional communications if you have requested information from us or purchased services, and you have not opted out.
  
  
• Even if you opt out of marketing, we may still send you essential messages — for example, service updates or administrative communication related to your account.
  
  
• If we wish to share your data with third-party marketers, we will ask for your explicit consent before doing so.
  
  
• You may opt out of marketing at any time — via an unsubscribe link, by email, or by contacting us.
  
  

10. When We Share Your Data (Third Parties)

We may share your personal data — only when necessary and lawful — with third parties including:

• Identity-verification, anti-money laundering or “Know Your Client” service providers
  
  
• Payment processors and financial institutions
  
  
• Public authorities or registries (if required to deliver services or comply with law)
  
  
• Service partners providing domain registration, hosting, mail-forwarding, or other corporate support
  
  
• Customer-support and communications platforms, marketing/CRM providers, analytics and web-hosting services
  
  
• Third parties to whom we refer you (with your consent), e.g. banks, business service partners
  
  
• Debt-recovery agencies if required for legitimate debt collection
  
  
• Potential buyers, successors or merger partners, in the event of business sale or restructuring
  
  

Each such partner must treat your data securely and lawfully. If they act as independent data controllers, you may need to contact them directly to exercise your data-subject rights in relation to the data they hold.

11. International Data Transfers

If we need to transfer your personal data outside the UK — for example to a partner or service provider — we will ensure appropriate safeguards are in place so that your data remains protected (e.g. using standard contractual clauses or relying on approved data-protection frameworks).

If you would like more information about the protections we use during an international transfer, you may request details at any time.

12. Data Retention

We will only keep your personal data for as long as needed to fulfil the original purpose, unless a longer retention period is required by law (for example for accounting, tax, legal or audit requirements).

Typically:

• We retain key data such as contact, identity, financial and transaction records for 7 years after our services end (or longer if required).
  
  
• In some cases (e.g. complaints, investigations, legal matters) we may retain data longer.
  
  
• If appropriate, we may anonymise data so it can be used for statistical or research purposes — in which case it no longer counts as “personal data.”
  
  

13. Security of Your Data

We take the security of your personal data seriously. We have implemented safeguards to prevent unauthorised access, accidental loss, misuse or disclosure. Access to your personal data is limited to authorised employees, agents or third-party service providers who need it to fulfil our services.

In the event of a data breach, we have procedures in place to respond quickly, notify affected individuals and regulators if required under applicable law.

14. External Links and Third-Party Websites

Our website may contain links to third-party websites, plug-ins or services (for example for payments, social media, hosting, analytics). We do not control — or take responsibility for — their privacy practices. We encourage you to review the privacy policies of any external site you visit.

15. Your Rights Under Data-Protection Law

You have certain rights regarding your personal data under UK data-protection legislation:

• Access: request a copy of the personal data we hold about you (“subject access request”)
  
  
• Correction: request correction of any inaccurate or incomplete data
  
  
• Erasure: request deletion of your data when there is no longer a valid reason for our processing
  
  
• Objection / Restriction: object to certain processing (e.g. marketing), or ask us to limit how your data is used
  
  
• Withdraw Consent: where processing is based on your consent, you may withdraw it at any time (though this may affect some services)
  
  

If you wish to exercise any of these rights — or have any questions about our use of your data — please contact us at:

📧 info@dragonflyassociates.co.uk

16. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our processes, legal requirements or services. When we do, we will post the revised policy on our website with an updated “Last updated” date. Continued use of our website or services after that constitutes acceptance of those changes.