Privacy policy
How Business Sale Compass uses personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and what you can do about it. Last updated: 14 October 2026.
Who is responsible for your data
The controller of your personal data is:
- Jorji GmbH, trading as Business Sale Compass
- Chamerstrasse 172, 6300 Zug, Switzerland
- Privacy contact: hello@businesssalecompass.co.uk
- UK representative under Article 27 UK GDPR: [name and UK address of the representative, or remove this line once legal review confirms none is needed]
Jorji GmbH is based in Switzerland and offers this service to people in the United Kingdom, so the UK GDPR applies to the data we hold about you. The Swiss Federal Act on Data Protection also applies to us.
What data we collect and where it comes from
When you ask for a valuation or an adviser. The answers you give in the form: sector, number of employees, turnover and profit bands, reasons for selling, timing and your own estimate of value. You also give your name, email address and phone number, and for valuations, your region. We do not ask for the name of your company.
When you email us. Your name, email address and whatever you choose to write.
When we contact company directors. We may write to directors of UK companies about selling their business. For this we use information from the public register at Companies House (name, role, appointment date, correspondence address and company details such as filed accounts), from company websites and from business contact databases, for example a work email address.
When you visit the website. Our hosting provider processes technical data such as your IP address, browser type and the pages requested, to deliver the website and keep it secure. We do not use analytics or advertising cookies. See the cookie policy.
Please do not send us health information or other special category data. We do not need it.
Why we use it and on what lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Preparing your valuation estimate, having it reviewed by an adviser and sending it to you | Your consent, given by ticking the box on the form (Article 6(1)(a)), and steps you have asked us to take (Article 6(1)(b)) |
| Suggesting advisers and introducing you to the advisers you choose | Your consent (Article 6(1)(a)). We only pass your details to an adviser after you have agreed to speak to them |
| Answering your emails and questions | Steps you have asked us to take (Article 6(1)(b)) and our legitimate interest in replying to enquiries (Article 6(1)(f)) |
| Contacting directors of UK companies by email or post about a possible sale | Our legitimate interest in offering our service to business owners (Article 6(1)(f)). See the section on business outreach below |
| Keeping the website secure and working | Our legitimate interest in running a safe website (Article 6(1)(f)) |
| Keeping records of referral fees, invoices and complaints | Legal obligations (Article 6(1)(c)) and our legitimate interest in defending legal claims (Article 6(1)(f)) |
The valuation figure is calculated with a formula, but a person reviews it before it is sent. We do not make decisions about you based solely on automated processing.
Where we rely on legitimate interests, we have weighed our interest against your rights. You can ask us for that assessment.
Business outreach to company directors
If you are a director of a UK company, we may have contacted you once or twice to ask whether a sale or succession is something you are considering. We do this on the basis of legitimate interests, using the sources listed above.
Under the Privacy and Electronic Communications Regulations 2003 (PECR), we send unsolicited marketing emails only to corporate subscribers, meaning limited companies and LLPs. We do not send them to sole traders or ordinary partnerships without consent. Every message says who we are and gives a simple way to opt out.
You can object to direct marketing at any time, free of charge. Reply to any of our messages or write to hello@businesssalecompass.co.uk. We will stop straight away and keep only the minimum needed (your name and address) on a suppression list, so that we do not contact you again.
Who we share data with
Partner advisers. Independent M&A advisers, corporate finance boutiques and business brokers. An adviser reviewing a valuation sees your answers and contact details. If you choose an adviser for an introduction, we pass your details to that adviser, who then becomes a separate controller of the data and handles it under its own privacy notice.
Service providers acting for us. Our hosting provider (Cloudflare, Inc.) and our email provider ([name of email provider]). They process data only on our instructions and under a written contract.
Professional advisers and authorities. Our lawyers, accountants and auditors where needed, and public authorities or courts where the law requires it.
We do not sell personal data.
International transfers
We are based in Switzerland. The UK has adequacy regulations for Switzerland, which means personal data can be sent there from the UK without extra safeguards.
If a service provider processes data in another country that is not covered by UK adequacy regulations, we use one of the safeguards recognised under UK law: the International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses or, for US companies certified under it, the UK Extension to the EU-US Data Privacy Framework. You can ask us for a copy of the relevant safeguards.
How long we keep data
| Data | How long |
|---|---|
| Valuation and adviser requests, and related emails | 24 months after our last contact with you, unless you ask us to delete them sooner |
| Outreach data about company directors | Until you object or until 24 months pass without a reply. After an objection we keep your name and address on a suppression list |
| Records of introductions, referral fees and invoices | 10 years, as required for business records under Swiss law |
| Complaints and correspondence about your rights | 3 years after the matter is closed |
| Website security logs | As set by our hosting provider, normally a few weeks |
Your rights
Under the UK GDPR you have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict how we use it;
- receive data you gave us in a portable format;
- object to processing based on legitimate interests, and object to direct marketing at any time without giving a reason;
- withdraw your consent at any time. This does not affect what we did before you withdrew it.
Email hello@businesssalecompass.co.uk to use any of these rights. We may ask you to confirm your identity. We reply within one month. For complex requests this can be extended by up to two further months, and we will tell you if that happens. There is no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first at hello@businesssalecompass.co.uk. We will acknowledge your complaint within 30 days and tell you what we are doing about it.
You also have the right to complain to the UK regulator, the Information Commission (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113.
Security
We use HTTPS, limit access to the people who need it and keep forms short. We do not ask for documents or for your company name in the first step.
Email is never completely secure. Please do not send confidential documents or trade secrets in a first message. If you think something has gone wrong, write to hello@businesssalecompass.co.uk straight away.
Changes to this policy
We will update this policy when our forms, providers or purposes change. The date at the top shows which version applies. If a change matters to you, for example a new purpose, we will tell you before it takes effect.