Last Updated: Aug 17, 2026
1. Introduction
Social Expert Trading Ltd (trading as “The Expert Link”) is committed to respecting your privacy. This notice explains how The Expert Link complies with data protection law, what your rights are, and how we may use the personal information we collect before, during, and after your relationship with us as a customer.
The Expert Link will be the data controller of any of your personal information as defined in Article 4(7) of the UK GDPR. This notice applies to our current and former customers. This notice does not form part of any contract and is for informational purposes only. References to “we,” “our,” or “us” in this privacy notice are to The Expert Link.
2. Contact Details
The Expert Link’s Data Protection Lead oversees our compliance with data protection legislation. Our ICO registration number is ZC146213. Our contact details are the following:
3. Personal Data
When you interact with The Expert Link in relation to your relationship with us as a customer, you may provide us with, or we may obtain, personal data about you. We typically collect personal data about customers through the sales and marketing process, either directly from customers or sometimes from their employers. We may sometimes collect additional information from third parties, including online business directories.
4. Data Collected, Processing Purposes, Lawful Bases, Data Sharing, and Retention Periods
The table below describes the main purposes for which we process your personal data, the categories of information involved, and our lawful bases for doing so. It also includes the types of organisations we share your personal data with and how long we retain it.
Data Collected | Purpose | Lawful Basis | Data Sharing | Retention Period |
| To monitor your activity on our website and platform. | | | Length of user subscription + 6 years |
| To reply to queries made through our website contact forms. | Consent Legitimate Interest
| | Length of user subscription + 6 years |
Name Address Email address Telephone number Profession Sector Medical Pin Health information
| To manage platform sign-ups to provide you access to our platform and services. | | | Length of user subscription + 6 year |
| To verify your healthcare professional credentials | | | Length of user subscription + 6 year |
Name Address Email address Telephone number Profession Sector Medical Pin
| To negotiate with you to enter a contract as a client with us | | | Length of user subscription + 6 year |
Name Address Email address Telephone number
| To communicate with you in relation to your platform subscription | | | Length of user subscription + 6 years |
Name Address Email address Telephone number
| To send you marketing communications | Consent Legitimate Interest
| | Length of contract + 6 years |
Name Address Email address Telephone number Payment details
| To fulfil our obligations to you in relation to your contract with us | | | Length of contract + 6 years |
| To send you product samples for testing and feedback. | | | Length of contract + 6 years |
When we rely on the lawful basis of legitimate interest to process your personal data, we must tell you what these legitimate interests are.
In some cases, you will have a legal, contractual, or other requirement or obligation to provide us with your personal information. If you do not provide us with the requested personal information, we may not be able to properly perform our contract with you or comply with legal obligations. In cases where you are not obligated to provide such information, failing to provide it may still mean we are unable to properly perform our contract with you. Where you have given us your consent to use your personal information, you have the right to withdraw this consent at any time. You
Please note that withdrawing your consent will not affect any use of the data made before consent is withdrawn, and we may still be entitled to hold and process relevant personal information on the basis of other legal grounds. Withdrawing consent may also have the same effects as not providing the information at all; for example, we may no longer be able to provide certain services to you.
5. Recipients of Personal Data and International Transfers
The Expert Link is required to transfer the personal information provided by its service users to third parties to fulfil contractual obligations. Where necessary, we may transfer personal information outside of the UK.
When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. Appropriate safeguards for international transfers are:
The following are categories of recipients to whom service user information could be transferred:
Data Processor | Providing | Nature of Processing | Location of Data | Transfer Safeguard |
Google Workspace | Cloud productivity apps | Personal data is contained in emails created by user, forms completed for product testing and stored in applicable cloud products. | EU | Adequacy |
20i | Website hosting provider | Personal data contained in message forms created by service user and stored in applicable cloud products. | UK | Adequacy |
KAO | Data centre | Personal data is contained on website hosting platform and its backups. | UK | Adequacy |
QuickBooks | Cloud accountancy provider | Personal data is contained in customer and supplier invoices | USA | EU-U.S. and Swiss-U.S. Privacy Shield Framework |
Dext | Cloud accountancy provider | Personal data is contained in customer and supplier invoices | UK | Adequacy |
Tide | Business Banking | Personal data is contained in customer and supplier payment transactions and profiles. | UK | Adequacy |
Royal Mail | Postal services | Personal data is contained within postal fulfilment requests in order to provide product testing. | UK | Adequacy |
In some circumstances, such as under a court order, we are legally obliged to share information. We may also share information about you with third parties, including government agencies and external auditors. For example, we may share your information with HMRC to collect VAT.
6. Your Rights In Relation To This Processing
As an individual, you have certain rights regarding our processing of your personal data, including a right to lodge a complaint with the Information Commissioner as the relevant supervisory authority.
Some of these rights are ‘absolute rights’, meaning you can exercise these rights as and when you like. Others are ‘qualified rights’, meaning certain conditions must be met for you to exercise these rights, or we can apply specific exemptions to prevent you from exercising these rights.
Right of Access (absolute): You have the right to obtain confirmation from [insert organisation name] as to whether personal data concerning you is being processed and, where that is the case, access to that data.
Right to Rectification (absolute): You have the right to oblige us to rectify inaccurate personal data concerning you. Considering the purposes of the processing, you have the right to have incomplete personal data completed by providing a supplementary statement.
Right to Erasure (Right to be Forgotten) (qualified): You have the right (under certain circumstances, but not all) to oblige us to erase personal data concerning you.
Right to Restriction of Processing (qualified): You have the right (under certain circumstances, but not all) to oblige us to restrict the processing of your personal data. For example, you may request this if you are contesting the accuracy of personal data held about you.
Right to Data Portability (qualified): You have the right (under certain circumstances, but not all) to oblige us to provide you with the personal data about you in a structured, commonly used, and machine-readable format.
You also have the right to oblige us to transmit data to another controller.
Right to Withdraw Consent (absolute): If the lawful basis for processing is consent, you have the right to withdraw that consent.
Right to Object to Direct Marketing (absolute): Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for marketing, which includes profiling to the extent that it is related to such direct marketing.
Rights in Relation to Automated Decision-Making and Profiling (qualified): The Expert Link does not perform any automated decision-making based on personal data that produces legal effects or similarly affects you.
7. Complaints
As an individual, you have the right to complain. The Expert Link is committed to protecting your privacy and handling your personal data fairly. If you have a concern or complaint regarding how we process your information, we encourage you to contact us directly so we can resolve the matter for you.
Upon receiving your complaint, we will acknowledge receipt within 30 days, investigate the matter and take appropriate steps to resolve your concerns. We will keep you informed of the progress of our investigation and provide a final response without undue delay. Data may be shared internally for investigation or with the Information Commissioner’s Office (ICO) if the complaint is escalated.
If you remain dissatisfied with our response, or if you believe we are not processing your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.
