Privacy Policy
Last updated 23 October 2026
1. Who we are
Veradine Ltd (company number HE 487415, registered in Cyprus, registered office Sotiras 2, Tziovani Building, Flat/Office 6, Paralimni 5286, Famagusta, Cyprus) runs FindYourBenefit and is the data controller for the personal data described here. FindYourBenefit is an independent service. It is not a government body, it is not authorised by the Financial Conduct Authority, and it does not lend, broker credit or give financial or debt advice.
2. What we collect
- Contact details: your name, email address, phone number (optional) and postcode.
- Your answers in the check: such as your date of birth, living situation, work, household income band, children, benefits, bills and recent life events.
- Health and disability answers, only if you agree: see section 4.
- Records of your request and consent: the date and time of your check and purchase, the boxes you ticked, and the IP address used. See section 5.
- Purchase records: the amount, a payment reference and its status, and the billing details you enter. Your card number goes to our payment provider. We never see or store it.
- Your account: the letters you generate or edit, and passkeys you register for signing in.
- Emails: the emails we send you and the emails you send us.
- If you came from a partner website: the contact details and answers that website passed to us with your consent, and its record of that consent.
3. Why we use it, our lawful basis, and how long we keep it
The lawful bases are those in Article 6 of the UK GDPR. Retention periods are explained in section 9.
| Purpose | Data used | Lawful basis | How long we keep it |
|---|---|---|---|
| Run your free check and show your results | Contact details, postcode and your answers | Steps you asked us to take before a contract (Art 6(1)(b)) | 12 months after your check if you do not buy; 6 years after purchase if you do |
| Use health and disability answers in your check and letters | Health, disability and pregnancy answers | Art 6(1)(b), and your explicit consent for special category data (Art 9(2)(a)) | As the row above, or until you withdraw consent (then deleted within one month) |
| Provide your paid report, letters and account | Contact details, answers, the letters you generate or edit | Performing our contract with you (Art 6(1)(b)) | 6 years after purchase |
| Take payment and give refunds | Amount, payment reference and status, billing details | Contract (Art 6(1)(b)) and our legal duty to keep accounting records (Art 6(1)(c)) | 6 years after purchase |
| Keep proof of what you asked for and agreed to | Date, time, IP address and the exact consent wording you agreed to | Legal obligation to be able to show consent (Art 6(1)(c)) and legitimate interests (Art 6(1)(f)) | As long as the check or purchase it relates to |
| Handle complaints, payment disputes (chargebacks), fraud and legal claims | Purchase records, consent records, emails, and a list of email addresses blocked after a fraud report or chargeback | Legitimate interests in defending claims and preventing fraud (Art 6(1)(f)) | 6 years after the complaint, dispute or claim ends |
| Send service emails (receipt, sign-in links, your results) | Name and email address | Contract (Art 6(1)(b)) | As long as the check or purchase it relates to |
| Send reminders about the report from your check (for up to 14 days after it), unless you tick the opt-out box beside the email field or unsubscribe. Checks made before 29 October 2026: only if you ticked the marketing box | Name, email address and the summary of your results (number of opportunities and the estimated total) | Legitimate interests in following up the report you asked about (Art 6(1)(f)), sent under the “soft opt-in” in regulation 22(3) of the Privacy and Electronic Communications Regulations. Every reminder has a one-click unsubscribe | Until you opt out, and never more than 14 days after your check |
| Know how you found us (the page you landed on and the website or search that sent you), to see which pages and adverts work | Landing page address and its campaign tags, the referring website, device type, and the time you spent on the check. Sent with your check; nothing is stored on your device | Legitimate interests in running and improving our service (Art 6(1)(f)) | As for the free check (12 months, or 6 years after a purchase) |
| Pass your contact details to our business check (FindYourBenefit Business), only if you tick that box | Name, email, phone and postcode | Your consent (Art 6(1)(a)) | As for the free check (12 months, or 6 years after a purchase) |
| Record leads that partner websites send us | The contact details and answers the partner sent, and its record of your consent | Your consent to the partner sharing your details with us (Art 6(1)(a)), and legitimate interests in keeping evidence of it (Art 6(1)(f)) | 12 months if you do not buy; 6 years after a purchase |
| Translate our emails if you used the site in another language | The content of the email | Legitimate interests in sending you emails you can read (Art 6(1)(f)) | Not kept by the translation service beyond the request (see section 6) |
| Keep the service secure and stop abuse | IP address, sign-in and checkout attempts, server logs | Legitimate interests (Art 6(1)(f)) | Security log 12 months; web server logs 14 days |
| Count visits to improve the site | Page viewed, referring site, browser, device type and country (no cookies, no IP address stored) | Legitimate interests (Art 6(1)(f)) | Kept as visit statistics that do not identify you |
4. Health and disability information (special category data)
Some support depends on health, disability or pregnancy: for example Personal Independence Payment, Attendance Allowance, a Blue Badge, the Council Tax disability reduction, a Disabled Facilities Grant or WaterSure. Information about your health is special category data under Article 9 of the UK GDPR.
- Your explicit consent. We only ask the health questions after you tick a separate, unticked box: “I agree to FindYourBenefit using the health and disability information I give to check what I may be entitled to. I can withdraw this at any time.” Our condition for using this data is your explicit consent (Article 9(2)(a)). We record the date, time, IP address and exact wording of your consent.
- You can say no. If you leave the box unticked, we skip the health questions, you can still finish your check, and our system discards any health answer before your check is saved.
- What it covers: whether you have a disability, long-term health condition or mobility issue; being unable to work for health reasons; pregnancy; being registered blind or sight impaired; a work injury or illness; a disabled child; a medical condition that means using more water; and the benefits you name.
- What we use it for: only to work out what you may be entitled to and to fill in your letters.
- Never shared or sold. We do not share your health information with any other company for its own use and never sell it. It is stored on our own servers (see section 6). If you used the site in another language, the emails we send you, which can name the support we found such as a disability benefit, are translated as described in section 6.
- Withdrawing consent. Email support@findyourbenefit.org.uk. We delete your health answers within one month and your results are then worked out without them. Withdrawing does not affect what we did before.
5. Records of your request and consent
We keep these records to prove what you asked for and agreed to, and to answer complaints, payment disputes and legal claims:
- Your check: the date and time you submitted it, saved with your answers and the boxes you ticked (privacy, optional emails, health information, FindYourBenefit Business).
- Health consent: a separate record of the date, time, IP address and the exact wording and version of the box you ticked.
- Your purchase: as our Terms (clause 5) explain, at checkout you confirm you want your report straight away and understand you then lose the 14-day right to cancel. We record the exact wording you agreed to with the date, time and IP address.
- Security log: the IP address of sign-in attempts and checkout sessions, used to limit repeated attempts and to investigate fraud.
- Web server logs: the IP address, time and page of each request, kept for 14 days.
- Leads from partner websites: the details the partner sent us, exactly as received, including its record of your consent.
If you dispute a payment with your bank, we send our payment provider the evidence it needs: the purchase record, the consent record with its time and IP address, and the record that your report was delivered.
6. Who we share data with
We do not sell your personal data, and we do not pass it to other companies for their own marketing. We have no lead-buying or referral partners: nothing you tell us is passed to another firm to contact you. Your data is shared only with the service providers below, who act on our instructions, and where the law requires it.
| Recipient | What for | Where |
|---|---|---|
| Hetzner Online | Hosts our servers and database | Helsinki, Finland |
| Backblaze | Stores our nightly database backups, encrypted before they leave our server | Amsterdam, Netherlands |
| Viva.com (Viva Wallet), our card payment provider | Takes card payments and refunds, runs 3-D Secure checks, and receives dispute evidence if you dispute a payment. Your card details go to them, never to us | Their own systems, under their own privacy notice |
| Amazon Web Services (Amazon SES) | Delivers our emails | Stockholm, Sweden |
| Anthropic | Translates an email into your language, only if you used the site in a language other than English. Anthropic does not use this data to train its models | United States |
| Data8 and postcodes.io | Look up addresses and your council from your postcode. Only the postcode is sent | UK-based services |
| FindYourBenefit Business (our business check, run by Veradine Ltd) | Your contact details, only if you tick the box asking for a separate business check | Our own servers |
Where your data comes from. Most people give us their details in our own check. Some come to us from partner websites (lead suppliers, some of which send leads through the LeadByte lead-distribution platform). Those partners pass us your details only with your consent, and we pay them for the introduction. We do not send your data back to them.
Transfers outside the UK. Finland, Sweden, the Netherlands and Germany are covered by UK adequacy regulations. Anthropic is in the United States and processes the email under its commercial data processing terms. We may also disclose data to the police, courts, the ICO or another authority where the law requires it, or to our professional advisers.
7. How your report and letters are made (automated evaluation)
- A rules engine, not AI. Your check is worked out by a fixed set of written rules. Each rule is based on the published conditions for a scheme (from GOV.UK, HMRC, the DWP, Ofgem, councils and similar official sources) and compares them with your answers. Where a scheme fits, the report shows it with an estimated value range and the source it comes from. The same answers always give the same result.
- Letters are fixed templates filled in with your details and answers. You can edit any letter before you send it.
- No AI or machine learning is used to decide what you may qualify for, or to write your report or letters. The only AI we use is the email translation described in section 6.
- No decision with legal or similarly significant effect is made about you by automated means alone(UK GDPR Article 22). Your report is an indication only: the council, HMRC, the DWP or the company concerned decides any claim you make.
- Payment safeguards. If our payment provider reports a payment as fraudulent or disputed, our system refunds it and blocks that email address from buying again, and it turns away a free check from an email that already has one.
- Ask a person. You can ask for a person to review your results or any of these steps by emailing support@findyourbenefit.org.uk.
8. Cookies and analytics
We use no advertising or tracking cookies, and we do not record your screen, mouse movements or keystrokes. The only cookies we set are:
| Name | Purpose | Type | Lasts |
|---|---|---|---|
mf_customer | Keeps you signed in to your account. Set only when you sign in | Strictly necessary | 30 days |
ei18n_lang | Remembers the language you chose for the site. Set only if you pick a language | Strictly necessary (a setting you asked for) | 30 days |
If you close the language bar, your browser's local storage remembers that (ei18n_dismissed); it never leaves your device. Visit statistics come from Umami, which runs on our own server (Hetzner, Falkenstein, Germany). It sets no cookies, does not store your IP address and does not follow you to other sites. On the payment page, the card form is loaded from our payment provider's servers, and any cookies it sets are its own, under its own privacy notice. Because we only use strictly necessary cookies, we do not show a cookie banner.
9. How long we keep data
- A free check you did not buy: 12 months after the check.
- A purchase (report, letters, payment, consent and email records): 6 years after the purchase, the period for tax records and legal claims.
- Complaints, payment disputes and fraud records, including the list of blocked email addresses: 6 years after the matter ends.
- Health answers: as above, or deleted within one month if you withdraw consent.
- Security log: 12 months. Web server logs: 14 days.
- Backups: nightly encrypted copies are kept for up to 12 months (7 daily, 8 weekly and 12 monthly copies), so deleted data disappears from backups as they expire.
Our records begin in June 2026, so no record has yet reached the end of its period. Deletion at the end of each period will run as a scheduled clean-up, which we will have in place before June 2027, when the first free-check records reach 12 months. You can ask us to delete your data sooner at any time (see section 10).
10. Your rights
Under the UK GDPR you can ask us to: give you a copy of your data; correct it; delete it; restrict how we use it; give it to you in a portable format; and you can object to anything we do on the basis of legitimate interests. Where we rely on your consent (health information, sharing with our other check) you can withdraw it at any time. You can stop our reminder emails at any time with the unsubscribe link in any of them, and you have an absolute right to object to direct marketing. Email support@findyourbenefit.org.uk. It is free, and we reply within one month. Some records, such as purchase and payment records, we must keep for the periods above even if you ask us to delete them, and we will tell you if that applies.
11. Extra help if you need it
If illness, disability, bereavement, money worries or anything else makes things harder for you, tell us and we will adjust how we help: plain English, at your pace, and pointers to free help such as Citizens Advice and MoneyHelper. If you did not understand what you were paying for, we refund you in full. Read our full Vulnerable Customer Policy.
12. Contact and complaints
Data requests and questions: support@findyourbenefit.org.uk. If you are unhappy with how we handle your data, please tell us first and we will try to put it right. You can also complain to the data protection authority where you live (in the UK, the Information Commissioner's Office at ico.org.uk).