Privacy Policy

Last updated: 3 May 2026

This Privacy Policy explains how Stratford Insights Ltd ("Stratford Insights", "we", "our", "us") — the company that operates NRI Financial Services at nrifinancialservices.com (the "Site") — collects, uses, shares, and protects personal data. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Two distinct sets of personal data are described here: (1) data about you, the visitor, when you use our Site or contact us; and (2) data about Non-Resident Indian (NRI) individuals contained in the marketing datasets we license to business customers.

1. Who we are

Data controller: Stratford Insights Ltd, a private company registered in England and Wales.

Trading name: NRI Financial Services.

Company number: [Insert Companies House number]

Registered office: [Insert registered office address]

VAT number: [Insert if VAT-registered]

Contact: contact@nrifinancialservices.com

2. Personal data we collect about Site visitors

2.1 Information you give us

Contact and enquiry data — name, email address, company, country, and any details you include when you email us about purchasing a dataset, requesting a sample, or asking a question.
Order and billing data — name, email, billing address, and payment reference (we do not store full card details; payments are processed by our payment provider).

2.2 Information collected automatically

Technical and usage data — IP address, device type, browser, operating system, referring page, and pages viewed. Used in aggregate to monitor performance and prevent abuse.
Cookies — strictly necessary cookies only by default. We do not use third-party advertising or tracking cookies. If we add analytics in the future, we will update this policy and obtain your consent where required.

3. Lawful bases for processing visitor data

Performance of a contract — to deliver datasets, invoices, and support to paying customers.
Legitimate interests — to operate, secure, and improve the Site, and to respond to your enquiries.
Consent — for any optional marketing emails you sign up for. You can withdraw consent at any time.
Legal obligation — to keep accounting records, respond to lawful regulatory requests, and meet anti-money-laundering requirements.

4. The NRI marketing datasets we license

4.1 What the datasets contain

The datasets we license to business customers contain personally identifiable information ("PII") about Non-Resident Indians located primarily in the United Kingdom, the United Arab Emirates, and the United States — typically including name, email address, phone number, country and city of residence, age band, and behavioural segment.

4.2 How the data was collected

All PII in our datasets is collected from publicly accessible databases of established consumer fintech, remittance, and diaspora-services companies referenced on our Site. Records are opted in by the data subject for marketing purposes with the originating platforms before being aggregated into our datasets. We do not include records that lack a documented marketing-consent basis.

4.3 Roles under UK GDPR

Stratford Insights Ltd acts as a data controller for the curation of the dataset and as a joint or independent controller when the dataset is supplied to a customer (depending on the customer's intended use). Customers act as independent controllers for any subsequent processing they undertake and are contractually required (under our Terms of Service) to:

Process the data only for lawful direct-marketing purposes within the scope of the original opt-in;
Honour any opt-out, suppression, or erasure request received from a data subject promptly;
Maintain appropriate technical and organisational security measures; and
Not resell, sublicense, or republish the dataset to third parties.

4.4 Your rights as an NRI listed in our datasets

If you believe a record about you is held in our datasets, you have the rights set out in Section 6 below — including the right to request erasure (the "right to be forgotten"). Please contact contact@nrifinancialservices.com with sufficient information to identify the record (typically the email address used) and we will action your request within one month.

5. How we share your data

We share visitor and customer data only with:

Service providers who host the Site, send transactional email, and process payments, under contractual confidentiality and security obligations;
Professional advisers such as auditors, accountants, and legal counsel, where strictly necessary;
Regulators or law-enforcement bodies where we are legally required to disclose.

We do not sell or rent visitor or customer personal data.

6. Your rights under UK GDPR

You have the right to:

Access the personal data we hold about you;
Request correction of inaccurate data;
Request erasure (the "right to be forgotten");
Restrict or object to certain processing;
Request portability of data you provided to us;
Withdraw consent at any time (where processing is based on consent);
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email contact@nrifinancialservices.com. We respond within one calendar month.

7. International transfers

Where personal data is transferred outside the United Kingdom, we rely on UK Adequacy Regulations or the UK Addendum to the EU Standard Contractual Clauses to ensure your data receives an essentially equivalent level of protection.

8. Data retention

Enquiry emails: retained for up to 24 months from last contact.
Customer order records: retained for 7 years to satisfy UK accounting obligations.
Dataset records: retained while the underlying marketing-consent basis remains valid; records are removed promptly on opt-out.
Server logs: retained for up to 90 days.

9. Security

We use industry-standard technical and organisational measures including HTTPS encryption, access controls, encrypted backups, and supplier vetting. No system is fully immune to compromise; we will notify the ICO and affected individuals of any qualifying personal data breach within 72 hours as required by UK GDPR.

10. Children

Our Site and datasets are not directed at children under 16. We do not knowingly collect personal data about minors.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the Site.

12. Contact

For any privacy-related question, request, or complaint, please email contact@nrifinancialservices.com. You also have the right to complain directly to the Information Commissioner's Office at ico.org.uk.