PRIVATE POLICY
Last updated: November 2026
1. Who We Are
Keychange Platform ("we", "us", or "our") operates the website [https://www.keychangeplatform.co.uk](https://www.keychangeplatform.co.uk). We are a UK business transfer and M&A advisory platform specialising in confidential business sales and acquisitions across the hospitality and healthcare sectors.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Michael Guida is the Data Controller responsible for your personal data.
Trading Name: Keychange Platform
Registered / Business Address: Mansion House, Manchester Rd, Altrincham WA14 4RW
Email Address: mike.guida@keychangeplatform.co.uk
2. What Personal Data We Collect
We collect and process only the personal data necessary to respond to your enquiries and provide confidential business transfer services:
Identity & Contact Data: Your name, job title, company name, email address, and telephone number when you contact us via email, telephone, or an intake form on our website.
Business & Transaction Data: High-level financial metrics, sector details, and operational information you voluntarily share during confidential valuation or buyer-matching consultations (note: we do not require sensitive personal data unless strictly necessary for regulatory or due diligence purposes).
Technical & Usage Data: Basic technical information such as your IP address, browser type, device type, and pages visited, collected automatically when you browse our website.
3. How We Use Your Data and Our Lawful Bases
Under UK GDPR, we rely on the following lawful bases to process your information:
To respond to confidential consultation requests and enquiries: Processed under Legitimate Interests (or Steps prior to entering into a contract) so we can answer your questions and assess potential business transfer opportunities.
To deliver advisory, valuation, and buyer-matching services: Processed under Performance of a Contract (including Non-Disclosure Agreements and engagement terms).
To maintain website security and performance: Processed under Legitimate Interests to ensure our platform runs reliably and securely.
To comply with legal and regulatory duties: Processed under Legal Obligation (such as anti-money laundering checks, tax compliance, and record keeping).
We never sell your personal data, nor do we publicly broadcast identifiable client details without your explicit written authorisation.
4. Cookies and Analytics
Our website is hosted on Squarespace, which uses essential cookies required for the site to function securely and load properly. Where non-essential analytics or performance cookies are used to understand website traffic, these are only placed in accordance with your preferences selected via our website's cookie banner. You can manage or disable cookies at any time through your browser settings or our cookie banner.
5. Who We Share Your Data With
We treat all enquiries with strict commercial confidentiality. We only share personal data with trusted third-party service providers who support our operations under strict confidentiality and data protection terms:
Website Hosting: Squarespace (for website infrastructure and security).
Email & Communications: IONOS (for secure business email hosting).
Professional Advisers & Vetted Counterparties: Lawyers, accountants, or pre-vetted prospective buyers/sellers—strictly only after you have given explicit consent and, where appropriate, a signed Non-Disclosure Agreement (NDA) is in place.
Some of our infrastructure providers (such as Squarespace) may process technical data outside the UK (including in the United States). Where this occurs, transfers are protected by recognised UK safeguards, including the UK-US Data Bridge or UK International Data Transfer Agreements (IDTA).
6. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purpose it was collected:
General & Consultation Enquiries: Retained for up to 24 months following our last communication if no formal engagement proceeds.
Client & Transaction Records: Retained for 6 years following completion or termination of an engagement to satisfy UK tax, accounting, and legal obligations.
7. Data Security
We use appropriate technical and organisational measures—including encrypted email transport, SSL/HTTPS website encryption, strict access controls, and anonymized deal teasers—to protect your personal and commercial information against unauthorized access, loss, or disclosure.
8. Your Rights Under UK GDPR
You have the right to:
Access a copy of the personal data we hold about you.
Rectify inaccurate or incomplete personal data.
Erase your personal data ("the right to be forgotten") where there is no compelling reason for us to continue keeping it.
Restrict or Object to our processing of your personal data.
Data Portability to request the transfer of your data to another party.
Withdraw Consent at any time where processing is based on consent.
To exercise any of these rights, please email mike.guida@keychangeplatform.co.uk.
9. Complaints
If you have any concerns about how we handle your personal data, please contact us first so we can resolve the issue promptly. You also have the right to lodge a complaint directly with the UK supervisory authority, the Information Commissioner's Office (ICO), at www.ico.org.uk or by calling 0303 123 1113.