Last updated 19 June 2026
We value you. We will never sell or rent your personal information, and we will never share it except as clearly set out in this policy. We protect your information as much as we reasonably can, and what follows shows our commitment to you and to your right to privacy. It explains what information we collect, how and why we use it, how long we keep it, who we share it with, and the rights you have over it.
SourceGuardian Ltd complies with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, as updated by the Data (Use and Access) Act 2025, and — where it applies to individuals in the European Economic Area — the EU General Data Protection Regulation (Regulation (EU) 2016/679, “EU GDPR”). It’s a legal requirement, though we like to think our honesty and integrity matter just as much.
SourceGuardian Ltd (“we”, “us” or “our”) is the data controller responsible for your personal information. We are a limited company registered in England and Wales under company number 05663267. Our registered office is:
SourceGuardian Ltd
A6 Kingfisher House, Kingsway, Team Valley Trading Estate, Gateshead, Tyne & Wear, NE11 0JQ, United Kingdom
For any questions about this policy, or to exercise any of your rights, please contact our Data Protection Officer (see section 12). General enquiries can be made via our Contact page at www.sourceguardian.com/contact.html.
This policy explains how we handle personal information in the situations described in section 3. Where we rely on your consent for a particular activity (for example certain marketing or non-essential cookies), we will ask for it separately and you can withdraw it at any time.
Because we are based in the United Kingdom but provide our products and services to customers in the EEA and worldwide, more than one data protection regime can apply. We aim to meet the requirements of all of them:
• the UK GDPR and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025);
• the EU GDPR, where we offer goods or services to, or monitor the behaviour of, individuals located in the EEA; and
• the Privacy and Electronic Communications Regulations (PECR) in relation to cookies and electronic marketing.
We collect information from you when you:
1. register to use our website (this may include your name, address, email address and telephone number, and any additional business or preference information you choose to give us);
2. place an order for our products or services (this may include your name and business name, address, contact details, and the payment details needed to process your purchase);
3. complete online forms (including contact forms and callback requests), take part in surveys, post on any message boards or blogs, enter competitions or prize draws, download materials such as white papers, or use any other interactive area of our website;
4. register for, access or use any product, service or app we provide; or
5. contact us offline, for example by telephone, email or post.
We also collect information automatically about your visit to our website and your use of our products and services through cookies and similar technologies (see section 8).
Under data protection law we must always have a lawful basis for using your personal information. The table below explains what we use your information for and the lawful basis we rely on:
To provide, manage and support the products and services you have requested, including issuing and validating licences.
• Lawful basis: performance of our contract with you.
To process and take payment for your orders, and to keep proper business and accounting records.
• Lawful basis: performance of our contract with you, and compliance with our legal obligations.
To respond to your enquiries, feedback and support requests.
• Lawful basis: our legitimate interests in running and improving our business, and performance of our contract with you.
For internal purposes such as auditing, data analysis and research to improve our products, services, website and customer communications, and to keep our systems secure.
• Lawful basis: our legitimate interests in operating, securing and improving our business.
To send you marketing about our products and services (see section 6).
• Lawful basis: your consent, or our legitimate interests where the law permits, in each case subject to your right to opt out at any time.
To comply with our legal and regulatory obligations and to establish, exercise or defend legal claims.
• Lawful basis: compliance with a legal obligation, and our legitimate interests in protecting our rights.
Where we rely on legitimate interests, we have considered your rights and interests and will not use your information where those interests override ours. You can ask us for more detail about this assessment at any time.
We do not sell your personal information, and we will not share it except as set out below:
• Service providers and processors who process information on our behalf — for example payment providers, hosting and IT providers, and analytics and email providers. They may only act on our documented instructions and under a written contract that requires them to keep your information secure and to use it only for the purposes we specify. We will not share your information with business partners or suppliers for their own marketing purposes.
• Corporate transactions — if we sell or buy a business or assets, or if SourceGuardian Ltd is acquired or merged with another company, your information may be one of the transferred assets, subject to the protections in this policy.
• Legal and regulatory disclosures — we will disclose your information where we are required to do so by law, to law enforcement or regulators where they are entitled to it, or to a third party in connection with actual or threatened legal proceedings, provided we can do so in compliance with data protection law.
We may also share aggregated or anonymised information (which cannot be used to identify you) with third parties.
Some of our service providers, and some hosting of our website, products and services (including email), may be located outside the UK and the EEA — for example in the United States. Where we transfer your personal information to a country that is not covered by UK or EU “adequacy” rules, we put in place appropriate safeguards to protect it, such as:
• the UK International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses together with the UK Addendum; and/or
• transfer to a recipient certified or located in a country recognised by the UK or EU as providing an adequate level of protection.
You can ask us for a copy of the relevant safeguards by contacting our Data Protection Officer (see section 12).
From time to time we may contact you by email, post or telephone with information about products and services we think may interest you, in line with your preferences and the law. You have the right to stop us contacting you for marketing at any time — you can do this by using the unsubscribe link in any marketing email, by setting your contact preferences where you provide your details, or by emailing us at support@sourceguardian.com.
Cookies are small text files placed on your device when you visit our website or use our products. We use them to provide a personalised service and to make our website, products and services work better for you. Except for cookies that are strictly necessary for the site to function, we only set cookies where you have given your consent, and you can change your preferences at any time through our cookie settings or your browser.
We use the following types of cookies and similar technologies:
• Session cookies — temporary cookies deleted when you close your browser or end your session, used to identify and track users and to remember the contents of your basket. They may contain your account number, company name and email address.
• Persistent cookies — cookies that remain on your device after you close your browser so we can remember who you are and your preferences.
• Analytics cookies — cookies that let us recognise and count visitors and see how they move around our website, products and services so we can improve them.
• Web beacons and tracking — small files used to understand how visitors reach us (for example after clicking one of our adverts) and which collect limited information that does not identify you individually.
We also keep traffic data logged automatically by our servers, such as your IP address and the pages you view, together with site statistics such as access rates and page views. We do not use this data to identify individuals.
Most browsers let you control or block cookies through their settings. To learn more, including how to manage and delete cookies, visit www.allaboutcookies.org. Please note that blocking some cookies may affect how parts of our website, products or services work.
We keep your personal information only for as long as we need it for the purposes set out in this policy. In practice this means:
• account and licence information is kept for as long as you have an account or a valid licence with us, and for a reasonable period afterwards;
• order, payment and accounting records are kept for at least six years to meet our legal and tax obligations;
• marketing preferences and suppression data are kept for as long as needed to respect your choices; and
• enquiry and support correspondence is kept for as long as needed to handle your request and a reasonable period afterwards.
When we no longer need your information, we will securely delete or anonymise it.
We take appropriate technical and organisational measures to protect your personal information against unauthorised or unlawful processing and against accidental loss, destruction or damage. Unfortunately no transmission over the internet can be guaranteed to be completely secure, and although we do our best to protect your information, any transmission is at your own risk. If we have given you (or you have chosen) a password to access certain areas, please keep it safe — we will never ask you to share it.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority, and you where required, in line with our legal obligations.
Data protection law gives you a number of rights over your personal information. Subject to certain conditions, you have the right to:
• be informed about how we use your information (which is the purpose of this policy);
• access a copy of the personal information we hold about you (a “subject access request”);
• rectification — to have inaccurate information corrected and incomplete information completed;
• erasure — to ask us to delete your information in certain circumstances (the “right to be forgotten”);
• restrict processing — to ask us to limit how we use your information in certain circumstances;
• data portability — to receive certain information in a structured, commonly used, machine-readable format, or to have it transferred to another controller;
• object — to object to processing based on our legitimate interests, and to object to direct marketing at any time; and
• withdraw consent at any time where we rely on your consent, without affecting processing carried out before you withdrew it.
You also have rights in relation to automated decision-making and profiling; we do not currently make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Exercising these rights is normally free of charge, and we will respond within one month (which we may extend for complex requests, in which case we will let you know). When you make a subject access request we will carry out a reasonable and proportionate search for your information. We may charge a reasonable fee, or decline to act, only where a request is manifestly unfounded or excessive. To make a request, please contact our Data Protection Officer (see section 12). We may need to verify your identity first.
If any information we hold about you is incorrect, or your details change, please let us know so we can keep our records accurate. To update your records, request a copy of your information, or exercise any of your rights, you can contact our Data Protection Officer:
Data Protection Officer
SourceGuardian Ltd
Three Indian Kings House, 31 Quayside, Newcastle upon Tyne, NE1 3DE, United Kingdom
Email: support@sourceguardian.com
We may update this privacy policy from time to time. Any change takes effect when we post the updated policy on our website, and we will show the date it was last updated at the top. Where changes are significant, we will take reasonable steps to bring them to your attention.
Our website may contain links to other websites. Unless they are owned by SourceGuardian, we are not responsible for the privacy practices of those sites, and we encourage you to read the privacy policy of any site you visit.
SourceGuardian
