Privacy Policy | InnoClaim

Last updated: July 2026

1. Introduction

This Privacy Policy explains how InnoClaim Limited (“we”, “us”, “our”) collects, uses, discloses, and protects your personal data when you interact with our website, our services, or our team. We are an R&D tax credit advisory firm led by a chartered principal. We use technology, including artificial intelligence tools, to prepare claims efficiently, but every professional judgement is made by a qualified adviser. We handle your personal data with care, transparency, and in compliance with UK data protection law, including the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

This policy covers personal data about website visitors, prospective and current clients, and the individuals connected with them. Where we act for a client, personal data about that client’s staff or contractors may pass through our claim work; we process that data under our engagement terms and this policy, and only as needed to prepare and support the claim.

2. Who we are

InnoClaim Limited is the controller of your personal data.

Company name: InnoClaim Limited Registered address: Greenside House, 50 Station Road, London, United Kingdom, N22 7DE Company registration number: 16257811 Data protection lead: Christopher Jones Email for data enquiries: hello@innoclaim.ai

3. The data we collect

Personal data means any information from which a living individual can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect and process the following categories of personal data:

Identity data: name, job title, and company name.
Contact data: email address, telephone number, and postal address.
Financial and claim data: the financial, accounting, technical, and project information needed to prepare an R&D claim, which may include information about a client’s employees and contractors (such as names, roles, and time spent on qualifying work).
Technical data: internet protocol (IP) address, login data where relevant, browser type and version, time zone and location, operating system and platform, and usage data collected through cookies and similar technologies.
Marketing and communications data: your preferences for receiving marketing from us and your communication preferences.

We may also collect, use, and share aggregated data, such as statistical or demographic data, for any purpose. Aggregated data may be derived from your personal data but is not treated as personal data in law because it does not identify you. If we ever combine aggregated data with your personal data so that it can identify you, we treat the combined data as personal data.

We do not collect special category data about you (such as data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, or genetic or biometric data), and we do not collect information about criminal convictions or offences.

Where we need to collect personal data by law or under a contract with you and you do not provide it when requested, we may be unable to perform the contract we have, or are trying to enter into, with you. We will tell you if this is the case at the time.

4. How we collect your data

We collect data in the following ways:

Direct interactions. You may give us your identity, contact, and other data by completing a form, or by corresponding with us by post, phone, email, or otherwise, for example when you enquire about working with us, ask us to provide services, request marketing, or give us feedback.
Automated technologies. As you use our website, we may automatically collect technical data about your device and browsing, using cookies and similar technologies. See our Cookie Policy for details.
Third parties and public sources. We may receive identity and contact data about you from public sources such as Companies House.

5. How we use your data and our lawful bases

We use your personal data only where the law allows. Most commonly, we rely on one or more of the following lawful bases:

Contract: to take steps at your request before entering into a contract, and to perform a contract with you, including preparing and supporting your R&D claim.
Legitimate interests: to run, improve, and market our business, where your interests and fundamental rights do not override those interests.
Legal obligation: to comply with our legal and regulatory duties, including anti-money-laundering and tax adviser obligations.
Consent: for certain marketing communications and for non-essential cookies that require consent. Where we rely on consent, you can withdraw it at any time.

We use your data to respond to enquiries, provide our services, meet our legal and regulatory obligations, manage our relationship with you, send you marketing where you have not opted out or where we are otherwise permitted to, and improve our website and services.

6. Artificial intelligence and automated decision-making

We use software, including artificial intelligence tools, to help us prepare and analyse R&D claims, for example to organise documents, transcribe recorded interviews, and draft supporting material. This is what allows us to offer a fixed, accessible fee.

Technology does not decide claims. Every AI-assisted output is reviewed by a suitably qualified person, and every professional judgement is made by our chartered adviser, who takes responsibility for it. We do not make decisions about you, or about a claim, by solely automated means that produce legal or similarly significant effects.

If we ever introduce processing that would amount to a solely automated decision with legal or similarly significant effects, we will tell you first, give you information about the logic involved, and provide the safeguards required by law, including the ability to make representations, to obtain human intervention, and to contest the decision.

We describe our tools in general terms because the specific tools we use are our own intellectual property. A named list of the sub-processors that may handle your personal data is available on request.

We may share your personal data with:

HM Revenue & Customs (HMRC), for claim submission and related correspondence;
your professional advisers (such as your accountant or legal counsel), where you ask us to or agree that we should;
service providers who support our business under strict data-processing agreements, including IT, cloud storage, and the technology providers that support our claim work; and
regulatory or legal authorities, where required by law.

We do not sell your personal data to any third party.

8. International transfers

Some of our service providers, including certain technology and cloud providers that support our claim work, may process personal data outside the United Kingdom. Where they do, we make sure a similar level of protection applies by relying on one of the following safeguards: transfers to countries that the UK Government has decided provide adequate protection, or contractual protections approved for use in the UK, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

You can ask us for more information about the safeguards that apply, and for the named sub-processor list, by contacting us at hello@innoclaim.ai.

9. Third-party links

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

10. Data security

We have put in place appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures include encryption, access controls, secure hosting, and staff confidentiality and training. We limit access to your personal data to those who need it, and they are subject to a duty of confidentiality. We have procedures to deal with any suspected personal data breach and will notify you and the Information Commissioner’s Office of a breach where we are legally required to do so.

11. Data retention

We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including to meet any legal, accounting, regulatory, or reporting requirements. For claim work, this typically means retaining records for the periods required by tax and anti-money-laundering law, which run for several years after our work for you ends. To decide the right retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements. In some circumstances we may anonymise your personal data, in which case we may use that information indefinitely without further notice to you.

12. Cookies

Our website uses cookies and similar technologies to distinguish you from other users, to help the site work, and to understand how it is used. Under changes that took effect on 5 February 2026, certain low-risk cookies, including first-party analytics used solely to improve our website, no longer require your consent, though you can still opt out. Non-essential cookies that fall outside those exemptions, including any advertising cookies, are set only with your consent. Full details, including how to manage your choices, are in our Cookie Policy.

13. Your legal rights

Under data protection law you have rights in relation to your personal data. You have the right to:

request access to your personal data (a “subject access request”);
request correction of personal data that is inaccurate or incomplete;
request erasure of your personal data where there is no good reason for us to continue processing it;
object to processing where we rely on legitimate interests, and to object at any time to processing for direct marketing;
request restriction of processing in certain circumstances;
request transfer of your personal data to you or a third party, where the right applies; and
withdraw consent at any time where we rely on consent.

To exercise any of these rights, please contact us at hello@innoclaim.ai.

No fee usually required. You will not usually have to pay a fee. We may charge a reasonable fee, or refuse to comply, if your request is clearly unfounded, repetitive, or excessive.

What we may need from you. We may need to request specific information to confirm your identity before we act, and we may contact you to ask for more information to help us respond. Where we do, the time limit to respond may pause until we receive what we need.

Time limit to respond. We aim to respond to all legitimate requests within one month. Occasionally it may take longer if the request is complex or you have made several requests; we will let you know and keep you updated. In responding, we make reasonable and proportionate searches for the information you have asked for.

14. How to make a complaint

If you are concerned about how we have handled your personal data, please contact us first at hello@innoclaim.ai so we can try to put things right. We will acknowledge your complaint promptly and respond without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at any time. You can reach the ICO at ico.org.uk, by its helpline on 0303 123 1113, or by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would, however, appreciate the chance to address your concerns before you approach the ICO.

15. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. Where changes are significant, we will take reasonable steps to bring them to your attention. Please check back from time to time.

16. Contact us

For any questions about this Privacy Policy or how we handle your personal data, please contact:

Data protection lead: Christopher Jones InnoClaim Limited Greenside House, 50 Station Road, London, United Kingdom, N22 7DE Email: hello@innoclaim.ai