Overview
PIP Agency Ltd. (“PIP Agency”, “we”, “us”, or “our”) operates the claims recovery platform at pip-agency.org. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our services.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable data protection legislation across the European Union. By using our platform, you acknowledge the practices described in this policy.
Your privacy matters to us
We collect only the information necessary to process your claim. We do not sell, rent, or trade your personal information to any third party for marketing purposes, ever.
What Data We Collect
We collect information in two ways: information you provide directly when using our platform, and limited technical information collected automatically.
Information You Provide
- Full name and contact details (email address, phone number)
- Wallet address or blockchain identifier used for authentication
- Financial loss details including amounts, platforms, and approximate dates
- Supporting documentation you upload (transaction records, correspondence, screenshots)
- Descriptions of the circumstances of your financial loss
- Communications you send to our support team
Information Collected Automatically
- IP address and general geographic location (country/region level)
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring website or source
- Session timestamps and interaction logs for security purposes
Special Category Data
In some cases, the details of your financial loss may incidentally include sensitive information. We treat any such information with heightened care and process it only to the extent strictly necessary to handle your claim. We do not intentionally request sensitive personal data beyond what is required.
How We Use Your Data
We use your personal information only for legitimate, clearly defined purposes. The legal bases under which we process your data are: performance of a contract (processing your claim), compliance with legal obligations, legitimate interests, and in limited cases your explicit consent.
Primary Purposes
- Receiving, reviewing, and processing your submitted claim
- Communicating with you about the status and progress of your case
- Verifying your identity and preventing fraudulent submissions
- Conducting case analysis and eligibility assessments
- Coordinating with relevant third parties involved in your recovery process
- Maintaining accurate records as required by applicable law
Secondary Purposes
- Improving the platform and user experience based on aggregated, anonymised analytics
- Detecting and preventing security threats, fraud, and abuse
- Complying with our legal and regulatory obligations
- Responding to lawful requests from law enforcement or regulatory authorities
We do not use your data for:
Profiling, targeted advertising, sale to third parties, automated decision-making that produces significant legal effects, or any purpose unrelated to your claim.
Data Storage & Security
Your data is stored on secure, encrypted servers located within the United Kingdom and the European Economic Area. We employ a combination of technical and organisational security measures to protect your information against unauthorised access, alteration, disclosure, or destruction.
Technical Safeguards
- TLS 1.3 encryption for all data in transit between your browser and our servers
- AES-256 encryption for data at rest
- Database access restricted by role-based access control (RBAC)
- Multi-factor authentication required for all staff with data access
- Regular penetration testing and vulnerability assessments
- Automated intrusion detection and alerting systems
Organisational Safeguards
- Data access is granted on a strict need-to-know basis
- All staff receive mandatory data protection training
- Confidentiality agreements are in place with all personnel
- Data processing activities are documented and regularly reviewed
- Incident response procedures are tested and maintained
Third-Party Sharing
We do not sell, rent, or trade your personal information. We may share your data with trusted third parties only in the following strictly limited circumstances:
Service Providers
We engage certain trusted service providers who assist us in operating our platform. These include cloud hosting providers, email delivery services, and IT security partners. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing services to us.
Legal and Regulatory Requirements
We may disclose your information when required to do so by law, court order, or in response to a lawful request by public authorities including law enforcement or regulatory bodies. We will notify you of any such disclosure where legally permitted.
With Your Consent
In certain cases, processing your claim may require sharing specific information with relevant third parties such as regulatory authorities, financial institutions, or legal representatives. We will always seek your explicit consent before doing so, unless disclosure is legally required.
No cross-border transfers without safeguards. Any transfer of your personal data outside the UK or EEA will be governed by appropriate safeguards such as standard contractual clauses or adequacy decisions recognised by the relevant data protection authority.
Your Rights
Under the UK GDPR and applicable data protection law, you have the following rights regarding your personal information. To exercise any of these rights, contact our Data Protection team at [email protected].
Right of Access
You may request a copy of all personal data we hold about you. We will respond within 30 days, free of charge.
Right to Rectification
If any information we hold is inaccurate or incomplete, you have the right to request that it be corrected.
Right to Erasure
You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Right to Restrict Processing
You can ask us to pause or limit how we process your data in certain circumstances, for example while a dispute is being resolved.
Right to Data Portability
You may request a machine-readable copy of your personal data to transfer to another organisation.
Right to Object
Where we process your data based on legitimate interests, you have the right to object. We will then cease processing unless we can demonstrate compelling legitimate grounds.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, or reporting requirements.
| Data Category | Retention Period |
|---|---|
| Active claim records | 7 years from case closure |
| Supporting documents | 7 years from case closure |
| Authentication logs | 12 months from creation |
| Analytics data (anonymised) | 26 months from collection |
| Support communications | 3 years from last contact |
| Legal correspondence | 10 years from creation |
After the applicable retention period expires, your data is securely deleted or anonymised in accordance with our data disposal procedures. You may request earlier deletion subject to legal retention obligations.
Privacy Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection team:
Data Protection Contact
We will acknowledge your request within 5 business days and aim to resolve it fully within 30 days. If your request is complex or you have made multiple requests, we may extend this period by a further two months, and we will notify you of any extension.