Privacy Policy

01Who we are

Welcome Business Solutions provides data intelligence APIs for address lookup, email and phone validation, fraud detection and credit risk scoring. In this policy, "we", "us" and "our" refer to Welcome Business Solutions Ltd.

When you use our website and account, we are the data controller. When we process personal data on behalf of a business customer through our APIs, we generally act as a data processor under that customer’s instructions.

02Information we collect

We collect information you provide and information generated as you use our service, including:

• Account and contact details — your name, business name, email address, and phone number.
• API data — the addresses, email addresses, phone numbers and identifiers your applications submit to our endpoints for verification or scoring.
• Technical data — IP address, API keys, request metadata, browser and device information, collected via logs, cookies and similar technologies.

03How we use your information

We use personal data to:

• Provide our APIs — validating, enriching and risk-scoring the data submitted to us and returning results to your application.
• Operate, secure and improve the platform, including monitoring for abuse and fraud.
• Communicate with you about your account, support requests and service updates.
• Meet our legal, regulatory and contractual obligations.

04Data sources and sharing

To deliver results, we connect to authoritative reference data and trusted third-party providers (for example postal address files, telecom network lookups, credit reference and fraud-signal providers). We share the minimum data necessary with these providers to fulfil a request.

We also use sub-processors who help us run the platform (such as hosting and infrastructure providers) under contracts that protect personal data. We do not sell personal data.

05Lawful basis

We process personal data to perform our contract with you, to pursue our legitimate interests in operating and securing the platform, to comply with legal obligations, and — where required — on the basis of consent obtained by you or your end customers.

06Security

We apply technical and organisational measures aligned with ISO 27001, including encryption in transit and at rest, access controls, and audit logging. Data submitted to our APIs is processed for the purpose of your request and retained only as needed to provide and secure the service.

07How long we keep it

We retain personal data only for as long as necessary to provide the service and to satisfy legal, accounting, fraud-prevention or reporting requirements, after which it is deleted or anonymised.

08Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data or complete incomplete data.
• Ask us to erase your data or restrict how we use it.
• Object to processing and withdraw consent at any time.
• Lodge a complaint with the Information Commissioner’s Office (ICO).

09Contact

To exercise any of these rights, or if you have questions about how we handle data, please get in touch using the details below.