Privacy Policy
Last Updated: 16 March 2026
1. Who We Are
FCM Intelligence ("we", "us", "our") operates the website www.fcmreport.com and provides market intelligence reports for Post Office and convenience store acquisitions.
We are the data controller for the personal data described in this policy.
Contact: reports@fcmreport.com
2. What Data We Collect
2.1 Report Customers
When you purchase a report, we collect:
| Data | Why We Need It | Lawful Basis |
|---|---|---|
| Full name | To personalise your report and watermark | Contract |
| Email address | To deliver your report and communicate about your order | Contract |
| Phone number (optional) | To contact you about your order if needed | Contract |
| Business of interest | To produce your report | Contract |
| Payment details | To process your payment (handled by Stripe — we never see your full card number) | Contract |
2.2 Insight & Intelligence Report Customers
In addition to the above, you may provide:
| Data | Why We Need It | Lawful Basis |
|---|---|---|
| Financial documents (P&L, accounts, tax returns) | To analyse the business financials in your report | Contract |
| Broker correspondence | To understand the context of the acquisition | Contract |
| Lease documents | To assess property terms | Contract |
Important: Financial documents you provide are used solely to prepare your report. They are not shared with any third party and are permanently deleted within 30 days of report delivery.
2.3 FCM Insider Subscribers
| Data | Why We Need It | Lawful Basis |
|---|---|---|
| Full name | To personalise your membership | Contract |
| Email address | To send listings, alerts, and membership communications | Contract |
| Location preferences (optional) | To match you with relevant listings | Contract |
| Budget range (optional) | To match you with relevant listings | Contract |
2.4 Website Visitors
| Data | Why We Need It | Lawful Basis |
|---|---|---|
| Cookies and analytics data | To understand how our website is used and improve it | Consent |
| IP address | Collected automatically by our hosting provider (Vercel) | Legitimate interest |
3. How We Use Your Data
We use your personal data to:
- Process and deliver your report order
- Communicate with you about your order (delivery, queries, follow-ups)
- Send FCM Insider alerts and listings (subscribers only)
- Improve our website and services
- Comply with legal obligations
We do NOT:
- Sell your data to third parties
- Share your data with marketing companies
- Use your financial documents for any purpose other than your report
- Send marketing emails unless you have subscribed to FCM Insider
- Profile you for advertising purposes
4. Who We Share Data With
We share your data only with the following service providers, who process it on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Name, email, payment details |
| Resend | Email delivery | Name, email |
| Vercel | Website hosting | IP address, cookies |
| Supabase | Order management | Name, email, order details |
All service providers are bound by data processing agreements and process data only on our instructions.
We do not share customer-provided financial documents with any third party.
5. Data Retention
5.1 Report Customers
| Data Type | Retention Period | Reason |
|---|---|---|
| Order details (name, email, which report) | 6 years | Tax and accounting records (HMRC requirement) |
| Your delivered report (PDF) | 12 months | In case you need it resent |
| Customer-uploaded financial documents | Deleted within 30 days of delivery | No longer needed |
| Customer-uploaded correspondence/files | Deleted within 30 days of delivery | No longer needed |
When financial documents are deleted, we will send you a confirmation email.
5.2 FCM Insider Subscribers
| Data Type | Retention Period | Reason |
|---|---|---|
| Name and email | Duration of subscription + 30 days | To provide the service |
| Preferences (location, budget) | Duration of subscription + 30 days | To match listings |
After cancellation, your data is deleted within 30 days unless you have also purchased reports (in which case order records are retained per 5.1).
5.3 Website Visitors
| Data Type | Retention Period | Reason |
|---|---|---|
| Analytics cookies | As per cookie settings (see Cookie Policy) | Website improvement |
| Server logs | 30 days | Security and troubleshooting |
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
6.1 Right of Access
You can request a copy of all personal data we hold about you. We will respond within 30 days.
6.2 Right to Rectification
If any data we hold is inaccurate, you can ask us to correct it.
6.3 Right to Erasure ("Right to be Forgotten")
You can request that we delete your personal data. We will comply within 30 days, except where we are required by law to retain certain records (e.g., tax records for HMRC).
6.4 Right to Restrict Processing
You can ask us to limit how we use your data in certain circumstances.
6.5 Right to Data Portability
You can request your data in a machine-readable format.
6.6 Right to Object
You can object to our processing of your data where we rely on legitimate interest as the lawful basis.
6.7 Right to Withdraw Consent
Where processing is based on your consent (e.g., cookies), you can withdraw consent at any time.
6.8 How to Exercise Your Rights
Email us at reports@fcmreport.com with the subject line "Data Rights Request". We will respond within 30 days.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: https://ico.org.uk
- Helpline: 0303 123 1113
7. Security
We take the security of your data seriously:
- All data is transmitted over encrypted connections (HTTPS/TLS)
- Payment processing is handled by Stripe (PCI DSS compliant) — we never store your card details
- Customer-uploaded financial documents are stored securely and deleted within 30 days
- Reports are watermarked with your details to prevent unauthorised distribution
- Access to customer data is restricted to authorised personnel only
8. International Transfers
Your data is processed within the UK and EU. Our service providers (Stripe, Vercel, Supabase) may process data in the United States. Where this occurs, appropriate safeguards are in place including Standard Contractual Clauses.
9. Children
Our services are intended for adults (18+) involved in business acquisitions. We do not knowingly collect data from anyone under 18.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on our website with a new effective date. Continued use of our services after changes constitutes acceptance.
11. Contact Us
For any privacy-related questions or to exercise your data rights:
FCM Intelligence
Email: reports@fcmreport.com
Website: www.fcmreport.com