Privacy Policy
This policy explains how we collect, use and protect personal data when you use this website, contact us or use the partner portal.
Who we are
Guilgal International is a trading name of Britcom Trading Limited, a company registered in England and Wales with company number 15625520. Our registered office address is shown on the Companies House register. In this policy "we", "us" and "our" mean Britcom Trading Limited, trading as Guilgal International.
We are the controller of the personal data described in this policy. For any question about it, or to exercise your rights, email john@guilgal.org.
Information we collect
We collect only the information needed for the purposes below.
- Enquiries. When you use a contact or investor enquiry form we receive your name, email address and message, and, where you give them, your organisation, country and area of interest. We also record that you ticked the consent box.
- Partner portal accounts. If you are invited to the partner portal we hold your email address, your name (if given), the projects you may view, the date your account was created and when you last signed in. Your password is stored only in a protected, one-way (hashed) form, so we cannot read it.
- Security records. To protect accounts we keep short-lived records of failed sign-in attempts, linked to the email address and network (IP) address used, so that repeated failures can be temporarily blocked.
- Technical data. Our hosting provider processes technical information such as IP addresses, browser type and the pages requested, in order to deliver the website and protect it from abuse.
- Analytics, only with your consent. If you choose "Accept analytics", Microsoft Clarity records how you use our public pages, such as clicks, scrolling and the pages viewed. Text you type into forms is masked. Clarity is never used on the partner portal, the partner login or the admin pages.
- Correspondence. If you email us, we keep the emails and any information you include.
We do not ask for special category data (such as health information) and ask you not to send it to us.
How we use it and our lawful bases
| Purpose | Information | Lawful basis (UK GDPR) |
|---|---|---|
| Responding to enquiries and discussing possible partnerships | Enquiry details, correspondence | Our legitimate interests in responding to people who contact us and developing business relationships; where you are acting for an organisation, steps before entering into a contract |
| Running the partner portal, including invitations, sign-in and access to the projects shared with you | Account details, security records | Performance of our arrangement with you or your organisation (including any confidentiality agreement), and our legitimate interests in keeping confidential information secure |
| Keeping the website and accounts secure | Technical data, security records | Our legitimate interests in protecting our website, our partners and confidential information |
| Understanding how the public website is used, so we can improve it | Analytics data | Your consent, which you can withdraw at any time |
| Meeting legal and regulatory obligations, and establishing or defending legal claims | Any of the above, as needed | Legal obligation, and our legitimate interests |
We do not sell your personal data, use it for automated decision-making, or send marketing emails without your agreement.
Who we share it with
We share personal data only with service providers who process it on our behalf and under our instructions:
- Netlify, Inc. hosts the website, receives enquiry form submissions and stores partner portal account data.
- Microsoft Corporation provides Microsoft Clarity analytics, used only if you consent.
- Our email provider, used when we correspond with you.
We may also share information with professional advisers, or where required by law, a court or a regulator. If you are introduced to a project owner or partner, we will only share your details with them where you have asked us to or agreed to it.
International transfers
Netlify and Microsoft are based in the United States, so personal data may be processed outside the UK. Where this happens we rely on recognised safeguards, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to standard contractual clauses, as offered by those providers.
How long we keep it
- Enquiries and correspondence: for as long as needed to deal with your enquiry and any resulting discussions, and normally no longer than 24 months after our last contact with you.
- Partner portal accounts: while you have access. When access is no longer needed we delete the account; you can ask us to do this at any time.
- Failed sign-in records: cleared after a successful sign-in, and any temporary block lifts after 15 minutes.
- Sign-in cookies: partner sessions last up to 30 days and admin sessions up to 2 hours.
- Analytics: held by Microsoft in line with Microsoft's own retention periods.
We may keep information for longer where the law requires it or where it is needed for a legal claim.
How we protect it
We protect personal data with appropriate measures. Partner passwords are hashed, sign-in cookies are signed and cannot be read by scripts on the page, repeated failed sign-ins are blocked, and the admin area needs both a password and an authenticator code. No system is completely secure, so please keep your sign-in details private and tell us straight away if you think they have been misused.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate data or complete incomplete data;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on legitimate interests;
- ask for your data to be transferred to another organisation, where this applies;
- withdraw your consent at any time, where we rely on consent (for analytics, use Cookie settings at the foot of any page).
To use any of these rights, email john@guilgal.org. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, although we would appreciate the chance to deal with your concern first.
Cookies, other websites and changes
Cookies. Our Cookie Policy explains the cookies we use and how to change your choice.
Other websites. Our website links to other websites. We are not responsible for their privacy practices.
Children. Our website and services are intended for businesses and professional investors, not for children.
Changes. We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
Last updated 6 November 2026.