Privacy policy

Who we are

The Company that Helps Ltd operates The Company that Helps, a membership platform that gives members exclusive offers and channels half of every membership into a community support fund. We are the data controller for the personal data described in this policy. You can reach our privacy team, including the person responsible for data protection, at privacy@thecompanythathelps.com, or by post at United Kingdom. We are registered with the UK Information Commissioner's Office as a data controller.

What we collect

• Account data — name, email address and the role you sign up under (member, brand or administrator).
• Membership data — subscription status, renewal dates and payment history. Card details are handled entirely by Stripe; we never see or store your full card number.
• Usage data — the offers you view, reveal or save, so we can show brands anonymised performance and improve recommendations.
• Brand data — company details, logos and verification documents supplied during brand onboarding.
• Support application data — the information and documents you choose to share when applying to the fund, including details about your circumstances.

Why we use it

We process account, membership and usage data to perform our contract with you: providing the membership, unlocking offers and reporting to brands. We process support application data on the basis of your explicit consent, given when you submit the application, because it may include sensitive information about your circumstances. We rely on legitimate interests for platform security, fraud prevention and product improvement.

Who can see your support application

Support applications are confidential. They are visible only to the small review team responsible for fund decisions. Brands never see applicant identities. Public reporting on the fund is aggregated so no individual can be identified. Reviewer notes are kept internal and are never shared with other members.

Sharing and processors

We share data only with the service providers (processors) needed to run the platform. We do not sell personal data and we do not share member identities with brand partners.

• Hosting, database and file storage — stores account, membership, brand and application data, encrypted in transit and at rest (EU/UK hosting).
• Stripe — payment processing, billing and fraud checks. Stripe is the controller of the card data it collects.
• Email provider — transactional emails such as receipts, case updates and password resets.
• Analytics and error monitoring — aggregated usage and error reports, only where you have accepted optional cookies.

Where a provider processes data outside the UK or EEA, we rely on the UK International Data Transfer Addendum and EU Standard Contractual Clauses. An up-to-date list of subprocessors is available on request from privacy@thecompanythathelps.com.

How long we keep it

Account and membership records are kept while your account is open and for six years after closure where required for tax and accounting. Support applications, award decisions and records of money paid out are kept for seven years after the case closes, to meet financial, audit and safeguarding obligations, and are then deleted or anonymised. Supporting documents you upload are deleted twelve months after a decision unless an award was made, in which case they follow the seven-year record. Usage analytics are aggregated after twelve months.

Your rights

You can request a copy of your data, correct it, ask us to delete it, object to processing or withdraw consent at any time. Email privacy@thecompanythathelps.com and we will respond within 2 working days. If you are in the UK and unhappy with our response, you can complain to the Information Commissioner's Office.

Members do not have to wait for us: your account settings include a one-click download of everything we hold about you, and a permanent delete that erases your profile, activity and application details straight away.

Support applications

A support application can include sensitive information about your finances, health, housing or family circumstances. We only process it with your explicit consent, which you give when you submit the form and can withdraw at any time. It is read solely by the review team assessing your request, never shared with brands, and never used for marketing. Applications and any award records are kept for seven years after the case closes, in line with the retention section above, and are then deleted or anonymised.

Cookies

Essential cookies keep you signed in and let payments complete. Optional analytics and marketing cookies only run with your permission, and you can change your mind whenever you like.