Privacy Notice

DelegateNow is a trading name of Bernat Perelló, a sole trader established at 51 Shakespeare Avenue, Bristol, BS7 0ER, United Kingdom. Bernat Perelló is the controller of personal information processed through DelegateNow. DelegateNow helps UK service businesses assess operational issues and access recommendations, learning resources and implementation support.

For privacy questions or to exercise your data protection rights, email privacy@delegatenow.co.uk. For general enquiries, email hello@delegatenow.co.uk. The founder’s personal email address is not a public contact channel and is not disclosed.

This notice applies to delegatenow.co.uk, DelegateNow accounts, assessments, contact and support enquiries, gated DIY guides and Learning Hub content. DelegateNow is a business service and is not intended for personal or household use or for children.

• Account and identity information: email address, account identifier, authentication records and basic account settings.
• Business-profile information: business name, industry or business type, location, employee range, the user’s business role and optional turnover range.
• Assessment and service information: assessment answers, scores, results, recommendations, saved progress, plans, guide usage and related account activity.
• Enquiry information: enquiry type, business name, name, email address, message and our response or follow-up records.
• Technical and security information: IP address, browser and device information, timestamps, authentication events, diagnostic records, security logs and consent preferences where generated by the service or its providers.
• Device-storage information: anonymous assessment progress and essential preferences stored in local storage, session storage, cookies or similar technologies on the user’s device.
• External-content information: if the user consents to or chooses to load a YouTube or other third-party embed, that provider may receive IP address, device, browser, interaction and cookie or identifier information under its own privacy terms.

Please do not submit special-category information, criminal-offence information, confidential client files, payment-card details or personal information about third parties through assessment or free-text fields unless DelegateNow has expressly asked for it and provided an appropriate process.

We obtain information directly from users when they create an account, complete an assessment, contact us or use the service; automatically from devices and service infrastructure; and from service providers that operate the platform on our behalf. Anonymous in-progress assessment data may remain on the user’s device until it is saved to an authenticated account or cleared.

• Provide accounts, assessments, results, recommendations, gated content and requested support — necessary to perform our contract with the business user or to take requested steps before entering into a contract.
• Receive, store and respond to enquiries — our legitimate interests in communicating with prospective and existing business users and, where applicable, taking requested pre-contract steps.
• Operate, secure, troubleshoot and improve the service; prevent misuse; maintain audit and security records — our legitimate interests in running a safe, reliable business service.
• Meet tax, accounting, regulatory, legal, complaint-handling and law-enforcement obligations — compliance with legal obligations and, where relevant, our legitimate interests in establishing, exercising or defending legal claims.
• Use non-essential analytics or load non-essential external content — consent where consent is required by PECR or data protection law. Consent may be withdrawn at any time through Cookie settings.

Where we rely on legitimate interests, the relevant interests are operating and protecting DelegateNow, responding to business enquiries, understanding service performance and protecting our legal rights. We consider necessity, reasonable expectations and the effect on individuals before relying on this basis.

DelegateNow uses assessment answers and scoring logic to generate business-efficiency results, ranked opportunities and recommendations. This supports business decision-making but does not make decisions that produce legal or similarly significant effects about an individual. Results are guidance and should be reviewed by the user.

We share information only where necessary with service providers acting for us, including: Supabase for database, authentication and related backend services; Lovable and its infrastructure providers for website and application hosting and operation; our business email hosting or delivery provider for emails actually sent or received; security, diagnostic and consent-management providers where enabled; and YouTube/Google or another external-content provider only when the relevant content is permitted to load.

We may also disclose information to professional advisers, regulators, courts, law-enforcement bodies, a buyer or successor to the business, or another person where required by law or reasonably necessary to protect legal rights. We do not sell personal information.

Contact-form submissions are currently stored in Supabase. DelegateNow does not claim that contact-form email notifications are operational until that facility has been configured and verified.

Some providers or their subprocessors may process information outside the United Kingdom. Before enabling a provider, DelegateNow must review its data-processing terms, subprocessor list, hosting region and transfer mechanism. Where a restricted transfer occurs, we use an applicable UK adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to EU Standard Contractual Clauses, together with the required data protection test and supplementary measures where appropriate.

• Anonymous assessment progress on a device: until the user clears it, completes or restarts the assessment, or the configured local-storage expiry removes it.
• Account, saved assessment, results and entitlement records: while the account is active, then deleted or anonymised from active systems normally within 30 days after a valid deletion request or account closure, unless retention is required for security, legal claims or law.
• Contact and support enquiries: normally 24 months after the last substantive interaction, unless needed longer for an active relationship, complaint or legal claim.
• Security and diagnostic logs: normally up to 12 months, unless a longer period is reasonably required to investigate an incident or protect legal rights.
• Consent records: for as long as needed to demonstrate the user’s current choice and normally refreshed at least every six months or sooner if purposes change.
• Tax and accounting records if paid services are introduced: for the period required by HMRC, normally at least five years after the 31 January Self Assessment submission deadline for the relevant tax year.
• Backups: deleted information may remain in restricted backups until overwritten under the relevant provider’s documented backup cycle and will not be restored for ordinary operational use.

DelegateNow reviews retention and will not keep identifiable information for longer than necessary. The technical implementation must not promise a backup deletion period until the applicable provider cycle is verified.

We use measures appropriate to the risk, including HTTPS, access controls, account authentication, least-privilege administrative access, secure secret handling, database access policies, provider due diligence, backups where appropriate, logging, updates and incident response. No internet service is completely secure. Users must keep account credentials confidential and notify us promptly of suspected unauthorised access.

• Access: ask for a copy of your personal information.
• Rectification: ask us to correct inaccurate or incomplete information.
• Erasure: ask us to delete information where the right applies.
• Restriction: ask us to restrict processing in certain circumstances.
• Portability: receive information you provided in a structured, commonly used, machine-readable format where the right applies.
• Objection: object to processing based on legitimate interests; objection to direct marketing is absolute.
• Withdraw consent: withdraw consent at any time without affecting earlier lawful processing.
• Complain: raise a data-protection complaint with us and complain to the Information Commissioner’s Office.

Rights are not absolute and exemptions may apply. We normally respond without undue delay and within one month after receiving a valid request. We may ask for proportionate information to verify identity. We do not ordinarily charge a fee, but the law permits a reasonable fee or refusal for requests that are manifestly unfounded or excessive.

1. Email privacy@delegatenow.co.uk from the address connected to the account where possible. Use the subject “Data rights request” or “Delete my DelegateNow account”.
2. State the right being exercised and enough information to identify the relevant account or enquiry. Do not email passwords or identity documents unless requested through a secure method.
3. We will acknowledge a data-protection complaint within 30 days, investigate without undue delay, keep the complainant informed where appropriate, and communicate the outcome.
4. For account deletion, we will verify the request, disable access, delete or anonymise account-linked information from active systems where required, address contact records held separately, and confirm completion or explain any lawful retention.

ICO contact: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; website https://ico.org.uk/make-a-complaint/. We encourage users to contact us first so we can try to resolve the matter.

The site may link to or embed resources operated by third parties, including YouTube. Links take the user to third-party services governed by their own terms. Non-essential embedded content must be blocked until the required consent is given or the user affirmatively chooses to load it after receiving clear information. Withholding consent must not prevent use of the core DelegateNow service.

We may update this notice when the service or law changes. The current version will be published at /privacy with its effective and last-updated date. Last updated: 22 August 2026.