LEGAL
Privacy Policy
Last updated: 17/07/2026 · Version 1.0
1. Who is responsible for your data
Nagsikap LTD trading as eposxp. is the data controller for the personal data described in this policy.
Address: Cardiff, South Wales
Email: josephramos@nagsikap.com
ICO registration number:16940541
This policy explains what we collect, why, who we share it with, and what rights you have under the UK GDPR and the Data Protection Act 2018.
2. What we collect
Information you give us
Contact details — name, business name, role, email, phone number
Enquiry content — what you tell us in forms, emails, calls, and meetings
Business and trading information — sector, size, locations, transaction volumes, average transaction value, current providers, existing rates and contract terms, merchant statements
Calculator and tool inputs — the figures you enter into our savings calculator, fee tools, and quote builder
Information we collect automatically
Technical data — IP address, browser type, device, operating system, referring page
Usage data — pages viewed, time on page, links clicked, forms started
See section 8 on cookies.
Information from other sources
For business development we compile contact details for businesses in South Wales and beyond from publicly available sources: company websites, Companies House, public business directories, and professional networking sites. This is usually business contact information — a business name, a role, and a work email or phone number. Where we hold information about you that you did not give us directly, you have the right to know, and this section is our notice to you under Article 14 of the UK GDPR. If you would rather we did not hold it, tell us and we will delete it.
3. Why we use it, and our lawful basis
What we do
Data used
Lawful basis
Respond to your enquiry and give you a consultation
Contact details, enquiry content
Legitimate interests — responding to someone who has approached us; or steps prior to a contract
Analyse your setup and produce recommendations
Business and trading information, statements, calculator inputs
Contract, or legitimate interests in delivering the service you asked for
Obtain quotes and make introductions to partner providers
Contact details, business and trading information
Contract, or your consent where we ask for it
Manage our client and prospect records
All of the above
Legitimate interests — running the business
Business-to-business marketing and outreach
Business contact details
Legitimate interests — marketing relevant services to businesses, balanced against your rights, with an opt-out on every message
Improve the website and our tools
Technical and usage data
Consent (analytics cookies), or legitimate interests for essential measurement
Meet legal, accounting, and tax obligations
Transaction and contact records
Legal obligation
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights. You can ask us for that assessment, and you can object at any time — see section 7.
4. Who we share it with
The one that matters most. The core of our service is comparing providers and getting you a quote. To do that, we pass your details — typically your name, business, contact details, and relevant trading figures — to the partner providers you ask us to approach. Once a provider has your data, they become an independent controller of it and their own privacy policy governs what they do with it. We only do this with your agreement, and we will tell you which providers we are approaching before we do it.
Partner providers
Depending on what you need, this may include providers such as Lightspeed, SumUp, Dojo, Teya, Epos Now, Shift4, Shopify, Vibe POS, Flipdish, Kayana, Zeller, and Paynt. The list changes. We will always name the specific providers involved in your case.
Service providers acting on our behalf
These process data under contract, on our instructions only:
Website hosting and forms — Wix
Email — Google Workspace
Records, CRM, and documents — Notion, Google Sheets, Google Drive, In house CRM App(local storage)
Scheduling — Calendly
Accounting — Tide
Others
Professional advisers, and law enforcement or regulators where we are legally required to disclose. We do not sell your personal data.
5. International transfers
Some of our service providers are based outside the UK, primarily in the United States and the EEA. Where personal data is transferred outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate safeguards. You can ask us for details of the mechanism used for a specific transfer.
6. How long we keep it
Record
Retention
Enquiries that do not become clients
24 months from last contact
Prospect and marketing contact records
Until you opt out or ask us to delete, reviewed every 24 months
Client engagement records and recommendations
6 years after the engagement ends
Merchant statements and trading figures
Deleted 12 months after the engagement ends unless needed for a live dispute
Invoices and financial records
6 years, per HMRC requirements
Website analytics
26 months
7. Your rights
Under UK data protection law you have the right to:
Access a copy of the personal data we hold about you
Rectify anything inaccurate or incomplete
Erase your data where we no longer have a good reason to hold it
Restrict how we use it while a concern is resolved
Object to processing based on legitimate interests — and to object to direct marketing at any time, which we must always honour
Portability — receive data you gave us in a machine-readable format
Withdraw consent where we relied on it, without affecting what we did beforehand
Email josephramos@nagsikap.com to exercise any of these. We will respond within one month, and it is free unless a request is manifestly unfounded or excessive. We may ask you to verify your identity.
8. Cookies
We use cookies and similar technologies. Strictly necessary cookies — those needed for the site to function, for security, and for load balancing — are set without consent, as the law permits. Everything else, including analytics and any advertising or embedded media cookies, is only set if you agree via our cookie banner.
Our site is built on Wix, which sets its own essential and analytics cookies. You can change your choices at any time through the cookie settings link on the site, and you can block or delete cookies in your browser — though the site may not work properly if you block essential ones.
9. Marketing
We send business-to-business marketing to business contacts on the basis of legitimate interests, as permitted for corporate subscribers under the Privacy and Electronic Communications Regulations. Every message includes an unsubscribe option, and we act on opt-outs promptly. If you are a sole trader or an unincorporated partnership, we will only email or text you with your consent or where you are an existing client and we are marketing similar services.
10. Security
We use access controls, multi-factor authentication, encrypted storage and transit, and a policy of only collecting what we actually need. No system is perfectly secure, but if a breach occurs that is likely to risk your rights and freedoms, we will notify the ICO within 72 hours and tell you where required.
11. Children
Our services are for businesses. We do not knowingly collect data from anyone under 18. If you believe we have, tell us and we will delete it.
12. Automated decision-making
We do not make decisions about you by automated means that produce legal or similarly significant effects. Our calculators produce estimates; a person reviews and interprets them.
13. Changes to this policy
We will update this page when our practices change and revise the date at the top. Material changes will be brought to your attention directly where we can.
14. Complaints
Please come to us first at josephramos@nagsikap.com — we would rather fix it. You also have the right to complain to the Information Commissioner’s Office at any time:
ico.org.uk/make-a-complaint
0303 123 1113
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF