Privacy policy

Last updated: 1 October 2026

This policy explains how ColdStop Pro collects and uses personal data when you visit our website or use our service, who we share it with, and the rights you have under UK data protection law.

1. Who we are

ColdStop Pro is a trading name of CS Ventures Group Ltd, a company registered in England and Wales (company number 16932569). Our registered office is Wyevale Business Park, 2 Wyevale Way, Hereford, HR4 7BS. We are registered as a data controller with the Information Commission (formerly the Information Commissioner's Office, and still known as the ICO), registration number ZC208302.

CS Ventures Group Ltd is the controller of the personal data described in this policy. For any question about your data, or to exercise any of your rights, please email privacy@coldstop.co.uk.

2. How our service uses your data

To provide our service, we must share some of your details with the companies we contact on your behalf. That is how they find and remove your records. We share only the details each company reasonably needs to find your record, and nothing is sent until you have confirmed your email address.

When you sign up, you sign a letter of authority appointing us as your agent. We then send requests to companies that collect and sell business contact information, asking them to stop using your personal data for direct marketing and to erase it where the right to erasure applies, under Articles 21 and 17 of the UK General Data Protection Regulation (UK GDPR). Each request includes proof of your authority and the details that company reasonably needs to identify you, normally your name, work email addresses and employer. We provide further details, such as telephone numbers, only where they are needed to find your record. We record the replies, follow up where needed, and report the outcome to you.

3. The personal data we collect

  • Sign-up details: your name, your contact email address, and the work email addresses, telephone numbers and employment details (such as employer and job title) that you ask us to have removed.
  • Your letter of authority: your typed signature, the date and time you signed, and the confirmations you gave when signing.
  • Payment information: payments are processed by Stripe. We receive a payment reference, the plan you chose, the amount paid and the email address used at checkout. We do not receive or store your full card details.
  • Request records: the requests we send in your name, the replies we receive (which may include information a company held about you) and the outcome of each request.
  • Correspondence: any emails you send us and our replies.
  • Technical information: when you visit our website, our hosting provider may process technical information such as your IP address and browser type in order to deliver and secure the site.

We do not ask for special category data, such as information about your health, beliefs or ethnicity. Please do not send it to us.

4. How we use your data and our lawful basis

  • To provide the service you have bought (verifying your payment, preparing your letter of authority, sending, chasing and re-sending requests, and reporting to you): performance of our contract with you.
  • To send you service emails (sign-up confirmation, progress updates, reports and renewal reminders): performance of our contract with you.
  • To keep financial and tax records: compliance with our legal obligations.
  • To keep evidence of your authority and of the requests made in your name, handle complaints, and establish or defend legal claims: our legitimate interests in running the business responsibly and protecting it and you.
  • To prevent fraud and misuse and keep our systems secure: our legitimate interests.
  • To improve the service using aggregated statistics that do not identify you: our legitimate interests.
  • To tell you about our own similar services: only where the law allows, and you can opt out at any time using the link in any such email or by contacting us.

We do not sell your personal data, and we do not use it to market other companies' products or services.

5. Our use of artificial intelligence

We use an artificial intelligence service provided by Anthropic to read and sort the replies that companies send us, for example into “confirmed deleted” or “needs more information”. This determines our next step on your request, such as sending a follow-up. Before any reply is passed to this service, we remove the copy of our original request and replace your name, email addresses, phone numbers and profile links with placeholders. The remaining text may still be personal data, for example if it mentions a job title. The service does not make decisions that have legal or similarly significant effects on you, a person reviews any refusal or unusual reply before we act on it, and you may ask us to review any outcome. Anthropic processes this information on our instructions and, under its commercial terms, does not use it to train its models.

6. Who we share your data with

  • The companies we contact on your behalf. Once they receive your request, they are responsible for how they handle your data under their own privacy policies.
  • Our service providers, who process data on our instructions: Google (business email, file storage, spreadsheets and the scripts that run our system), Anthropic (sorting replies, as described above) and Webflow (website hosting).
  • Stripe, which processes payments. Stripe also acts as an independent controller for some purposes, such as fraud prevention and meeting its legal obligations. See Stripe's privacy policy.
  • Professional advisers, such as our lawyers and accountants, and regulators, courts or law enforcement where the law requires it.
  • A buyer or successor, if the ColdStop Pro business is transferred to another organisation. We will tell you if this happens.

7. International transfers

Our service providers. Some of our service providers may process your data outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework where the recipient is certified) or by the International Data Transfer Agreement or Addendum approved for use in the UK.

The companies we contact for you. Many of these companies are based outside the UK, mainly in the United States and the European Union. Sending them your request necessarily means sending them the details needed to identify you. Where the company is in a country covered by UK adequacy regulations, or is certified under the UK Extension to the EU–US Data Privacy Framework, we rely on that. Otherwise, we send your request because it is necessary to perform our contract with you and because you expressly ask us to do so when you sign up, having been told that the company's country may not protect personal data to the same standard as the UK.

8. How long we keep your data

  • Sign-up details, request records and replies: while you are a customer and for 12 months after your service ends, after which we delete them.
  • Your letter of authority and a record of the requests sent in your name: for six years after your service ends, so that we can show we acted with your authority if this is ever questioned.
  • Payment and accounting records: for six years from the end of the financial year in which the payment was made, as required by law.

If you ask us to delete your data sooner, we will do so, except for any limited records we must keep for the reasons above.

9. How we protect your data

Access to customer data is limited to the people who run ColdStop Pro and is protected by two-step verification. Our files are not shared publicly, and our providers encrypt data in transit. If a personal data breach occurs, we will report it to the Information Commission (ICO) within 72 hours where required, and we will tell you without undue delay if it is likely to pose a high risk to you.

10. Your rights

Under UK data protection law you have the right to:

  • access a copy of the personal data we hold about you;
  • ask us to correct data that is inaccurate or incomplete;
  • ask us to erase your data;
  • ask us to restrict how we use your data;
  • object to our use of your data where we rely on legitimate interests, and object at any time to direct marketing;
  • receive data you have given us in a portable format; and
  • withdraw any consent you have given.

To exercise any of these rights, email privacy@coldstop.co.uk. There is normally no charge. We will respond within one month, which may be extended by up to two further months for complex requests, and we may ask you to confirm your identity first. Please note that if you ask us to erase your data or withdraw your letter of authority while your requests are in progress, we will not be able to continue the service.

11. Cookies

Our website uses only cookies and similar technologies that are strictly necessary for it to work and stay secure. We do not use advertising cookies. If we introduce analytics cookies, we will ask for your consent first and update this policy.

12. Children

Our service is intended for adults in professional roles. We do not knowingly collect data from anyone under 18.

13. Data protection complaints

If you are unhappy with how we have handled your personal data, you can make a data protection complaint by emailing privacy@coldstop.co.uk. Please put “Data protection complaint” in the subject line and tell us what has happened. We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed of progress and tell you the outcome. You also have the right to complain to the Information Commission (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. The ICO will normally expect you to have raised the matter with us first.

14. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change, we will tell our customers by email.