How your application details are handled.

Data controller and business address

MobileVerity handles website enquiries and application-review requests from its business address at 12 High Street, Maidstone ME14 1HT. Use the contact form on this website for privacy requests so the team can match your request with the right email address and reference.

Information we collect

When you send an application review, we collect your name, date of birth, email, phone number, residential and optional marital status, current address and, when needed, previous address history. We also collect your customer type; relevant company, trading, role and VAT details; device, quantity, delivery, network, contract, budget, contact-time and support preferences; your payment follow-up preference; optional rollout notes; selected device and plan details; and records of the confirmations you gave. The payment follow-up choice is a preference only: this form does not collect card numbers, bank account numbers, sort codes or payment security codes.

When you send the contact form, we collect your email and message. When you submit the newsletter form, we collect your email address, subscription status and the page where you subscribed. For security and abuse prevention, the server stores a one-way hash derived from your IP address, your browser's user-agent string, timestamps and request-rate counters. The hash groups repeated requests and is not used for marketing.

When information is sent

Application fields are not autosaved to this browser or the server. They are transmitted only when you press "Send application for review". Contact and newsletter details are transmitted only when you submit their respective forms. The non-personal device shortlist is stored in your browser so it remains available between pages.

Why we use the information

We use application details to review the request, contact you, prepare an appropriate provider hand-off and protect the service from abuse. An eligibility confirmation records your understanding that an identified provider may later require eligibility or credit checks; this website does not itself run a check. Any provider must be identified and its terms explained before information is transferred or a check is carried out.

We use contact-form details only to answer the request. An application or contact request does not subscribe you to marketing. We send device-launch and comparison updates only after you separately submit the newsletter form.

Who receives it

Information is stored with the website and database hosting provider. Authorised staff can access applications, contact messages and newsletter statuses through the password-protected admin area. A transactional email provider may carry a staff alert, but the alert deliberately excludes date of birth and address details. No external network, lender or eligibility provider is connected in this build. We do not sell personal data.

Retention

Application-review records are deleted no later than 90 days after creation. Closed or cancelled applications are deleted 30 days after their last update. Contact messages are deleted no later than 12 months after creation, or 180 days after being marked closed. Newsletter email addresses are retained while subscribed; unsubscribed records are deleted after 30 days. Security rate-limit records are deleted after two days. Cleanup runs automatically during normal site use and can also be run by an administrator.

Your choices and rights

You may ask for access, correction, deletion or restriction of your information, or object to its use where applicable. Use the contact form and include the email and request reference involved. To stop newsletter updates, use the contact form with the subscribed email address; staff can mark it unsubscribed. You may also complain to the UK Information Commissioner's Office.

Cookies and browser storage

A short-lived, strictly necessary session cookie protects forms against forged submissions. It is marked HttpOnly and SameSite Strict. The device shortlist uses local browser storage. A successful-submission reference is kept in session storage for the current browser session. No advertising or analytics cookies are included in this build.

Security

The application uses encrypted HTTPS in production, CSRF protection, same-origin checks, rate limits, server-side validation, prepared database queries, restricted admin access, limited notification emails and automatic retention cleanup. No internet service can promise absolute security.

Changes

If this notice changes materially, the version date will change. Application submissions record the version accepted at the time.