Last updated: August 2026
Introduction
cosmic-saga ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website and services, you consent to the data practices described in this policy.
Information We Collect
Personal Information You Provide
When you contact us, request a consultation, or use our services, we may collect:
- Full name and title
- Email address
- Postal address
- Information about your benefits or pension situation
- Supporting documentation you provide
- Communication records between you and our advisors
Information Collected Automatically
When you visit our website, we may automatically collect certain information about your device and browsing activity, including:
- IP address
- Browser type and version
- Pages visited and time spent on pages
- Referring website addresses
- Device type and operating system
How We Use Your Information
We use the information we collect for the following purposes:
- To provide benefits and pension consultation services
- To respond to your enquiries and consultation requests
- To communicate with you about your case and appointments
- To maintain records as required for our professional obligations
- To improve our website and services
- To comply with legal and regulatory requirements
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Contract: Processing necessary to perform our consultation services
- Consent: Where you have given explicit consent for specific purposes
- Legal obligation: Processing required to comply with UK law
- Legitimate interests: Processing for our legitimate business interests, provided these do not override your rights
Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:
- With your explicit consent for specific purposes
- To government departments when acting on your behalf (e.g., DWP correspondence)
- To professional advisors and insurers as necessary
- When required by law or legal process
- To protect our rights, property, or safety
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Client records are typically retained for seven years after the conclusion of our services, in accordance with professional standards.
Your Rights
Under UK data protection law, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Request limitation of processing in certain circumstances
- Portability: Request transfer of your data to another service provider
- Objection: Object to processing based on legitimate interests
To exercise any of these rights, please contact us using the details provided below.
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised policy on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact us:
cosmic-saga
42 Princes Street
Edinburgh EH2 2BY
United Kingdom
Email: [email protected]
Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted at ico.org.uk.