Privacy notice

Privacy notice — Modular client portal

Last updated 1 November 2026

Who we are

Modular Consultancy Ltd, registered in England & Wales 13055378, 7 Reigate Court, Worthing BN11 5LD, United Kingdom. We decide how the information you give on this portal is used. Contact us at onboarding@modularconsultancy.com.

What each page collects and why

  • Free audit: your contact details and your card statements and invoices, so we can audit your card fees. We also keep a record that you accepted our NDA (who accepted it, for which business, when, and which version).
  • Rate Reset: your company, bank and merchant details, for your Savings Agreement, the letter of authority to your card payment provider, the Direct Debit for our fee, and our negotiation with your provider.
  • Switch provider: contact details, dates of birth, home addresses, photo ID, proof of address, and business and bank documents, so we can submit your merchant account application to our payment partner.

Why we are allowed to use it

  • To take the steps you ask for before we enter a contract with you, and then to carry out that contract.
  • Our legitimate interests in running and protecting our service.
  • Legal obligations, for example the anti-money-laundering checks a payment provider must make.

Who receives it

These services receive your information, each for its own part of the work:

  • Netlify, which receives the form you send.
  • Uploadcare, which receives your encrypted files.
  • Zapier, which moves files to our storage.
  • Dropbox, which stores your files.
  • Google Gmail, for email.
  • HubSpot and Close, for our client records and call records.
  • DocuSign, for signing documents.
  • GoCardless, for the Direct Debit.
  • Rapyd, only if you are switching to Rapyd.
  • Your current payment provider, only what the letter of authority covers, if you have a Rate Reset agreement.

We never sell your information.

Where it is kept

Most of these services store data in the United States. Transfers are covered by the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge, as each service provides. Our team works from the United Arab Emirates and accesses the data from there.

Encryption

Bank details, dates of birth, home addresses and documents are encrypted on your device before they are sent. Only Modular can decrypt them.

How long we keep it

  • If you don't go ahead: 3 years from your audit.
  • If you become a client: while you are a client, and for 6 years after the agreement ends.
  • Photo ID and proof of home address, and the dates of birth and home addresses you type in: 6 months after your new account goes live or the application is declined.

Files we delete stay in our storage provider's deleted-files area for up to 30 days. After that they are gone for good.

Your rights

You can ask to see, correct or delete your information, object to how we use it, ask us to limit how we use it, and ask for a copy to take elsewhere. Email onboarding@modularconsultancy.com.

You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Do you have to give these details?

Yes, if you want us to go ahead. Without them we can't prepare your agreement or application.

Details about other people

If you give us details of other people, such as other directors, owners or partners, please show them this notice.

Our website

Our main website has its own privacy notice at modularconsultancy.com/privacy.html.