Last updated: May 15, 2026
neat-stream is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides detailed information about how we comply with data protection regulations and your rights as a data subject.
For the purposes of data protection legislation, neat-stream is the data controller responsible for your personal information.
Contact details:
Email: [email protected]
Address: 42 Kensington Gardens, London, W2 4AR, United Kingdom
We process personal data only when we have a lawful basis to do so under UK GDPR. The lawful bases we rely on include:
When you provide explicit consent for us to process your personal data for specific purposes, such as marketing communications or storing sensitive personal information. You may withdraw your consent at any time by contacting us.
When processing is necessary to fulfill our contractual obligations to you, such as providing benefits assessment services, application assistance, or tribunal representation.
When we must process your data to comply with legal requirements, such as financial record-keeping obligations or responding to lawful requests from authorities.
When processing is necessary for our legitimate business interests or those of a third party, provided your rights and interests do not override those interests. This includes fraud prevention, network security, and direct marketing to existing clients.
In the course of providing benefits advisory services, we may process special categories of personal data, including:
We process special category data only when:
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about how it is being processed.
You have the right to request correction of inaccurate personal data and completion of incomplete personal data.
You have the right to request deletion of your personal data in certain circumstances, including:
You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you. We do not engage in automated decision-making.
To exercise any of your data protection rights, please contact us at [email protected] with the following information:
We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension and reasons for the delay.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also report the breach to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, where required by law.
We primarily process and store personal data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:
Where processing is likely to result in a high risk to your rights and freedoms, we conduct Data Protection Impact Assessments (DPIAs) to identify and minimize risks.
We engage third-party service providers to assist with our operations. All processors are carefully selected and bound by data processing agreements that ensure they:
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our retention schedule includes:
Our services are not directed at children under 18. We do not knowingly process personal data of children. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete that information.
We regularly review our data protection practices to ensure ongoing compliance with UK GDPR. Any changes to our practices will be reflected in updates to this page and our Privacy Policy.
If you have concerns about how we handle your personal data, please contact us first at [email protected]. We take complaints seriously and will investigate thoroughly.
You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
For questions about GDPR compliance or to exercise your data protection rights:
Email: [email protected]
Address: 42 Kensington Gardens, London, W2 4AR, United Kingdom