Placeholder — must be reviewed by a qualified data protection adviser before launch. Items marked [NEEDS CONFIRMATION] still require a real fact (UK representative details, or the signed transfer agreement) before this page is accurate.

Controller

Cerdas Labs Sdn. Bhd. (company number 202601002615 / 1664712-A), a company registered in Malaysia and trading as SettleIQ, is the controller for personal data collected through settleiq.co.uk. Contact: team@settleiq.co.uk. Cerdas Labs Sdn. Bhd. is a data controller established in Malaysia, with no establishment in the UK. On that basis, and following our own assessment against the ICO's data protection fee self-assessment tool, we are exempt from paying the ICO data protection fee and do not hold an ICO registration number. We remain fully committed to UK GDPR compliance, including via our appointed Article 27 Representative below.

[NEEDS CONFIRMATION] Because Cerdas Labs is established outside the UK and offers a service to, and monitors the behaviour of, individuals in the UK, we are required under Article 27 UK GDPR to appoint a UK representative for data protection matters. Our appointed representative is [NEEDS CONFIRMATION: name and contact details of UK GDPR representative]. You may contact our UK representative on any matter relating to the processing of your personal data, in addition to contacting us directly.

What we collect

When you submit a Folio request: your name, email address, optional phone number, the property address and details you supply, and any notes you add. No payment is taken at this stage. Card or payment details are never entered on, transmitted through, or stored by settleiq.co.uk — once your folio is ready, we email a separate payment link hosted by Dodo Payments, our payment provider, and Dodo Payments handles payment entirely on their own page.

If you submit an enquiry through our partner page instead, we collect your name, firm name, email, optional phone number, partner type, professional registration number (where relevant), estimated client volume, and any notes you add — used only to assess and respond to that enquiry.

Why

To produce and deliver the Folio you commissioned (performance of a contract), to meet accounting and tax obligations (legal obligation), and to improve the methodology using aggregated, non- identifying information (legitimate interests).

Property addresses

The address you submit is used to assemble the research and is retained with your order record. We do not disclose to any seller, agent or third party that a specific address has been researched. Addresses are never used to train any machine-learning model, public or private.

Who we share it with

We use a small number of processors to run SettleIQ, each acting only on our instructions:

Google Workspace — request-form submissions are logged to a Google Doc and confirmation emails are sent via Google's infrastructure, so Google processes this data as our processor.
Dodo Payments — our Merchant of Record, handles the £400 payment on its own page once your folio is ready; we never see or store your card details. Dodo Payments is the legal seller for that transaction and processes your payment details as an independent controller for its own compliance, tax and fraud-prevention purposes — see Dodo Payments' own privacy notice for how it handles your data at the payment stage.
Google Analytics — see below and our Cookie Policy for when this loads and what it is used for.

We do not sell personal data, and we do not share it with any seller, listing agent, or other party to a transaction you are researching.

International transfers

Cerdas Labs Sdn. Bhd. is incorporated in Malaysia, which does not currently hold a UK adequacy decision, so personal data collected through settleiq.co.uk from UK data subjects is transferred to Malaysia for processing, and may also be processed outside the UK by our service providers. Where this happens, we rely on the following safeguards:

Google (Workspace, Apps Script, Analytics) — transfers are covered by Google's Cloud Data Processing Addendum, which incorporates the UK Addendum to the EU Standard Contractual Clauses. We have certified that UK data protection law applies to our use of Google's services and named the ICO as our supervisory authority.
Dodo Payments — transfers are covered by Dodo Payments' Data Processing Agreement, which incorporates both the EU Standard Contractual Clauses and the UK Addendum by reference for UK data subjects. Dodo Payments holds a PCI DSS v4.0.1 Level 1 certification for its payment processing services.
Airwallex — transfers are covered by the UK International Data Transfer Agreement (IDTA), incorporated into our Master Services Agreement with Airwallex.

Each of these mechanisms requires the receiving party to apply UK-equivalent safeguards to your data regardless of where it is processed.

Analytics

We use Google Analytics, which is not cookieless — it sets cookies on your device to measure how visitors use the site. It only loads after you accept non-essential cookies through our consent banner; the lawful basis for this processing is your consent, which you may withdraw at any time by changing your choice — see our Cookie Policy for how.

Retention

We keep Folio order records, including the address researched and your contact details, for 6 years from the end of the tax year in which the order was placed, to meet UK accounting and tax record-keeping obligations. Partner enquiry details that do not convert to a partnership are kept for 12 months and then deleted.

Your rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability and objection. To exercise any of them, email team@settleiq.co.uk, or contact our UK representative named above. You may also complain to the Information Commissioner's Office at ico.org.uk.