Privacy Notice

1. Why this Privacy Notice is important to 'You', 'Your'

This Privacy Notice is important because it explains to You how we may use the personal information We collect and hold about You. Should You have any questions about this Privacy Notice, please see the contact details at the bottom of the Notice.

2. UK Data Protection Law

Throughout this Privacy Notice we will talk about UK Data Protection Law — this predominantly means the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003, as well as the UK GDPR.

3. Who we are — 'We', 'Us', 'Our'

DataZip is a trading name of GetYa Marketing Management FZCO, a company registered in the Dubai Silicon Oasis Free Zone, United Arab Emirates, under company number DSO-FZCO-39103 (Trade Licence 41236). Our registered office is: Dubai Silicon Oasis, IFZA Business Park, Dubai, United Arab Emirates.

GetYa Marketing Management FZCO (trading as DataZip) is the Data Controller of the personal information held about You. As we process the personal data of UK residents, We are registered with the UK Information Commissioner's Office (ICO) under the Data Protection Act 2018.

Our Data Protection Officer is Craig Johnson. He can be contacted by email at compliance@datazip.co.uk, or by writing to: The Data Protection Officer, DataZip (GetYa Marketing Management FZCO), Dubai Silicon Oasis, IFZA Business Park, Dubai, United Arab Emirates.

DataZip owns and operates a number of websites which include, but are not limited to: www.datazip.co.uk / www.getyaoffers.co.uk / www.getyavouchers.co.uk / www.getyagifts.co.uk / www.surveysonline.co.uk / www.surveytaker.co.uk

4. Our ethos

We want this Privacy Notice to be honest, open and transparent, because We know that Your privacy, and the protection of Your personal information, is important to You. We take every reasonable precaution to ensure compliance with UK Data Protection Law. Further information about Your rights is available from the Information Commissioner's Office at www.ico.org.uk. We do not want to collect or hold any personal information about You that You do not wish or intend to give.

5. What information do You hold about me?

We collect three categories of personal information about You: Identifiable Information, Anonymous Information and Lifestyle Information.

• Identifiable Information means any information from which You can be personally identified — for example, Your name, address, date of birth and email address.
• Anonymous Information means information that does not identify You personally but categorises You into groups — for example age group, gender, marital status and income.
• Lifestyle Information means information about Your way of life and interests, which helps Us understand You better.

Together We call this 'Personal Information'. We do not collect or hold any health, financial or credit details pertaining to You or any individual.

6. Where is Your personal information held?

The personal information We collect is held on Our database on secure servers. We use a variety of physical and network security technologies and procedures to help protect Your information from unauthorised access, use or disclosure, and only a limited number of people in Our organisation have access to it.

7. How do We collect Your personal information?

• when You register on one of Our sites;
• when You complete one of Our lifestyle questionnaires or surveys;
• when You complete Our unsubscribe form;
• when You submit a Data Protection Enquiry or Subject Access Request (SAR);
• when We purchase or license Your information from other suppliers.

We also purchase and/or license personal information from third parties (Data Contributors). Regardless of how Your personal information is collected, Our Data Contributors warrant to Us that You have given current consent (Opt-In) for Your information to be passed to Us. We only ever work with Data Contributors that operate within UK Data Protection Law and are registered with the ICO at the time of purchase.

You have the right under UK Data Protection Law to opt out of receiving marketing material at any time — see sections 11 and 12 below.

8. Who do We share Your personal information with?

We license data to Clients who operate in accordance with UK Data Protection Law, enforced through Our contractual relationships with them. Where a Client operates outside the UK/EEA, We put additional contractual provisions in place to ensure an adequate level of protection.

Below is a list of the business categories in which Our Clients operate. Depending on what personal information We hold about You, Our Clients may contact You by post, telephone, email, SMS or AI voice calling for direct marketing.

Category	Example business types
Charity	Animal welfare, health & medical, environment, human rights, elderly care
Finance	Banks & building societies, credit cards, loans, mortgages, pensions, PPI/claims
Gambling	Lotteries, online betting, bingo, casino, poker
General & lifestyle	Care homes, fitness, health & wellbeing, property, tracing, debt recovery, telecoms
Insurance	Home, life, car, pet, travel and private medical insurance
Retail	Fashion, food & drink, general stores, home improvement, online retail
Travel	Airlines, car hire, holidays, hotels, travel booking
Utilities	Energy, broadband, solar, telecoms, water providers
Claims management	PPI reclaim, packaged bank accounts

9. What do We use Your personal information for?

• Pass Your details on to selected Clients who will contact You with offers and promotions;
• Help other companies profile and extend their own databases;
• Provide You with information about products and services We offer;
• Conduct market research;
• Unsubscribe You from Our databases, or add You to Our suppression file;
• Send You newsletters, competitions and promotions;
• Communicate with You about an enquiry You have made;
• Build a profile of You by combining third-party list information with information We collect, to help target relevant advertising;
• Wealth screen You, to check likely financial capability for fundraising or similar activity;
• Support Clients' online advertising with relevant content.

We will never profile You on the basis of ethnicity, religion, politics or health, and We do not hold or collect this information. We also do not make automated decisions about You which have a negative impact on Your rights.

10. Marketing Service Providers

Where We do share Your data with Marketing Service Providers, they may combine it with data from other sources to create predictive models, helping organisations understand their customers, improve marketing relevance, and validate/update the accuracy of the data they hold (for example, checking whether You have moved address).

Your data may be shared, via Our getya-branded websites, with the following Marketing Service Providers. To understand more about their use of Your data, and how to exercise Your data protection rights with them (including how to opt out), please see their own privacy policies:

• Experian Ltd — www.experian.co.uk/privacy/consumer-information-portal
• Sagacity Solutions Ltd — www.mydatachoices.co.uk/Privacy

In sharing data with Marketing Service Providers, We rely on the lawful basis of legitimate interest, as Our business depends on the ability to partner with third parties who process personal data for marketing-related purposes.

Purpose	Legal basis — Us	Legal basis — third parties
Marketing — by email	Consent	Legitimate Interest / Consent, where the organisation is in a named business category above
Marketing — by post and telephone	Legitimate Interest	Legitimate Interest
Service messaging — email	Legitimate Interest	Contract / Legitimate Interest
Service messaging — post and telephone	Legitimate Interest	Contract / Legitimate Interest
Tracing, ID verification and credit reference	Legitimate Interest	Legitimate Interest
Profiling and analytics	Legitimate Interest	Legitimate Interest

11. What if I don't want to receive any more information from You?

You can opt out at any time of Us holding Your personal information on Our database by emailing compliance@datazip.co.uk with "Opt-Out" in the subject line.

We call this process suppression — standard marketing industry practice approved by the ICO, meaning just enough information about You is retained to ensure Your wishes are respected and Your details are not reintroduced to Our database in future. Marketing communications should stop within a maximum of 28 days for electronic communications and two months for postal communications.

12. What other rights do I have?

• The right to withdraw consent to processing at any time, including processing based on legitimate interests;
• The right to be forgotten / total erasure;
• The right to rectification of inaccurate or incomplete information;
• The right to know what personal information We hold about You (contact us using the details in section 17);
• The right to data portability;
• The right to lodge a complaint with a supervisory authority (the Information Commissioner's Office) if You are not satisfied with how We have handled Your request.

13. Our general disclosure to You

1. We will hold information about You on Our database until You ask Us to suppress it.
2. Once You register with Us, You consent to DataZip being able to send You communications via post or email until You exercise Your right to unsubscribe.
3. We will share information about You with Clients and Sponsors, who may hold and use it on their own websites and/or databases.
4. You consent to Our Clients and Sponsors sending You communications via post or email until You withdraw that consent.
5. Our Data Retention Policy: We will retain Your details for as long as required for the purposes for which they were collected, and only while Your data remains valid, accurate and up to date, or until You unsubscribe directly with Us or via a partner using Your details. As an absolute maximum, We will hold data processed under 'Legitimate Interest' or 'Consent' for up to ten years. Where We hold an email address for You, We will maintain regular contact and ensure You have the opportunity to opt out at least once every six months. Our backup policy is to back up data daily, with one monthly backup retained offsite for six months before secure deletion.

14. IP addresses and cookies

We may collect information about Your computer, including Your IP address, operating system and browser type, for system administration and aggregate reporting. This is statistical data and does not identify any individual. We may also use cookies to understand which pages are viewed and how frequently. If You wish to disable cookies, You can do so via Your browser settings, though this may affect some site features. We may collect IP addresses from form submissions solely to identify and restrict spam or automated submissions.

15. The sale or acquisition of GetYa Marketing Management FZCO or its assets

If GetYa Marketing Management FZCO (trading as DataZip) or any of its assets are acquired by or merged with another entity, Your personal information may be one of the transferred assets. If We choose to sell or transfer Our assets, We may retain a copy of Your information post-sale or merger.

16. Changes to this Privacy Notice

We will occasionally update this Privacy Notice and will post a notification of any changes at the foot of Our websites. If changes affect Your rights under UK Data Protection Law, We will contact You to explain the changes and, where required, obtain Your permission.

17. Contact us

This Privacy Notice was last updated on 06/09/2026.