Privacy policy
Last updated 2 August 2026
This policy explains how Thucy Ltd ("Thucy") collects and uses personal data when you form a company with us. Thucy is the data controller for the personal data described here. We are registered with the Information Commissioner's Office under registration number [ICO registration number].
Data we collect
To form a company we collect details about you and the other people involved: names, dates of birth, nationality, occupation, residential and service addresses, contact details, shareholdings, and the identity documents needed to verify identity. We also collect account and payment information and technical data such as device and usage information when you use the service.
Why we use it, and our legal basis
We use your data to provide the service and prepare your filings (performance of our contract with you), to verify identity and carry out anti-money-laundering and sanctions checks and to keep the records the law requires (legal obligation), to take payment and prevent fraud (legitimate interests and legal obligation), and to improve and secure the service (legitimate interests). Where we rely on legitimate interests we balance them against your rights.
Who we share it with
We share the information necessary to form your company with Companies House, which publishes some company information on the public register. We share data with identity verification and anti-money-laundering providers, payment processors, and IT and hosting suppliers who act for us under contract, and with authorities and regulators where the law requires. We do not sell your personal data.
International transfers
Where a supplier processes data outside the UK, we rely on an adequacy decision or on approved safeguards such as the International Data Transfer Agreement to protect it.
How long we keep it
We keep formation and identity-verification records for as long as the law requires, which for anti-money-laundering records is generally five years after the end of our relationship, and longer where a specific legal obligation applies. After that we delete or anonymise the data.
Your rights
You have the right to access your data and to ask us to correct, delete, or restrict it, to object to certain uses, and to data portability. Some of these rights are limited where we must keep data to meet a legal obligation. To exercise a right, contact us using the details below. You can also complain to the Information Commissioner's Office at ico.org.uk.
Contact
For privacy questions or to exercise your rights, email privacy@thucy.co.uk.