Privacy
Privacy Policy
ValuBase is designed to minimise the amount of personal and financial information transmitted to us. The valuation tool performs its core calculations within your browser, while limited information may be processed where necessary to operate, secure and improve the website or respond to enquiries.
- Valuation inputs stay in your browser
- No ValuBase account is required
- Valuation data is not intended to be stored by ValuBase
01
Who this policy applies to
This Privacy Policy explains how personal information may be processed when you visit ValuBase, use the valuation tool, contact us or otherwise interact with the website. ValuBase is intended primarily for business owners, buyers, advisers and other users evaluating established private businesses. The service is not intended for children.
- Data controller
- The legal entity operating ValuBase is not identified in this application. Please contact us via the Contact page to confirm the controller identity.
- Website
- ValuBase
- Contact
- ValuBase Contact page
02
Valuation information entered into the tool
The valuation workflow may invite you to enter information such as the following, all of which relates to the business being assessed rather than to you personally:
- company name
- location
- sector and subsector
- financial performance
- revenue
- operating profit / EBIT
- EBITDA
- EBITDA normalisation adjustments
- maintainable EBITDA assumptions
- business-quality assessments
- customer-concentration information
- valuation assumptions and professional adjustments
To support the valuation session, the information you enter is held in your browser’s session storage so that it persists while you move between the steps of the valuation. Closing the browser, or resetting the session, clears this information. Session storage is local to your device and is not a ValuBase server-side store.
Important caution: users should avoid entering unnecessary personal information into free-text fields. Where possible, valuation inputs should relate to the business rather than identifiable individuals.
03
Other information we may process
ValuBase is designed to minimise data, but the following categories of information may arise from normal website operation, where applicable.
A. Contact information
You can contact ValuBase by email at hello@valubase.io. Where you email us, the information you choose to include (for example your name, email address and message contents) will be processed to respond to your enquiry.
B. Technical information
As with any hosted website, the infrastructure that serves ValuBase may automatically record limited technical information such as IP address, browser and device type, operating system, approximate geographic region, referral source, page requests, timestamps and diagnostic or security information. This is generated through normal hosting and security operation rather than active profiling of users by ValuBase.
C. Analytics information
ValuBase does not currently implement analytics tracking in the application. If analytics is introduced, it will be described here, including the categories of aggregate or pseudonymous information processed and how consent is managed where required. Financial figures and valuation inputs would not be intentionally included in any analytics events.
04
How information may be used
Where information is processed through normal operation of the website, it may be used for the following purposes:
- providing and operating the website
- responding to enquiries
- maintaining website security
- detecting technical problems or misuse
- understanding aggregate website usage
- improving usability and performance
- complying with legal or regulatory obligations where applicable
- establishing, exercising or defending legal claims where necessary
05
Lawful bases for processing
Because ValuBase is a UK-facing service, where the UK GDPR applies the lawful basis for any processing depends on the activity. We may rely on one or more of the following lawful bases where applicable:
Legitimate interests
For operating, securing and improving the website and responding to ordinary business enquiries, where those interests are not overridden by the individual’s rights and freedoms.
Consent
Where consent is required, for example for optional analytics or similar technologies, where applicable and where such technologies are actually implemented.
Contract / steps before contract
Where processing is necessary in connection with a service or request made by the user.
Legal obligation
Where processing is necessary to comply with applicable law.
Not every basis applies to every activity. The appropriate basis is assessed by reference to the specific processing concerned.
06
Cookies, local storage and similar technologies
Essential technologies
Used where required for core website functionality, security, preferences or session operation, including the browser session storage that holds your valuation inputs between steps.
Analytics technologies
Used only where implemented and, where legally required, subject to the user’s consent. ValuBase does not currently implement analytics in the application.
Browser storage
ValuBase uses your browser’s session storage to support valuation session continuity. This is local to your device and is not a ValuBase server-side store. Valuation input values are not used for advertising profiling.
ValuBase does not itself set advertising cookies. The application code does not set cookies directly; however, the hosting infrastructure may set technical cookies that are not visible from the application code and cannot be fully verified from this notice. Such cookies, where present, would be limited to what is necessary to operate and secure the website.
07
Service providers and data sharing
Limited information may be processed by suppliers needed to operate the website, such as:
- website hosting and infrastructure providers
- analytics providers, if and when analytics is enabled
- email and communications providers used to receive and respond to enquiries
- security or technical service providers
ValuBase is built and hosted on a third-party application platform, which provides the infrastructure serving this website. That platform may process limited technical request information necessary to deliver and secure the site. Specific processors beyond the hosting platform are not identified in the current application.
08
International data transfers
Some infrastructure or service providers may process information outside the United Kingdom. Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data-protection law. The specific transfer mechanism applicable to the hosting infrastructure cannot be confirmed from the application and is not described further here. If you require confirmation of the safeguards in place, please contact us.
09
How long information is kept
Valuation inputs
Not intended to be retained by ValuBase as part of the browser-based valuation workflow. They are held in your browser session storage and cleared when the session ends.
Contact enquiries
Where you email us, retained only for as long as reasonably necessary to respond to the enquiry and manage any related correspondence.
Analytics / technical records
Retained according to the applicable analytics, hosting or security configuration. ValuBase does not currently implement analytics.
Legal records
May be retained for longer where necessary to comply with law or to establish or defend legal rights.
Exact retention periods are not defined in the current application beyond what is described above.
10
Security
Reasonable technical and organisational measures are used to protect information processed through the website. Processing valuation inputs locally reduces the need to transmit sensitive company financial information to ValuBase, which is a key privacy feature of the tool’s design.
11
Your data protection rights
Where UK data-protection law applies, individuals may have rights including those listed below. Rights depend on the circumstances and the lawful basis relied upon.
Right of access
Requesting confirmation of what personal information is held.
Right to rectification
Correcting information that is inaccurate or incomplete.
Right to erasure
Asking for personal information to be deleted in certain circumstances.
Right to restriction
Asking for processing to be limited in certain circumstances.
Right to object
Objecting to processing carried out under certain lawful bases.
Right to data portability
Receiving certain information in a structured, machine-readable form, where applicable.
Right to withdraw consent
Withdrawing consent at any time where processing is based on consent.
To exercise a data-protection right, please contact us through the ValuBase Contact page.
12
Complaints
If you have concerns about how personal information is handled, please contact us first so that we can investigate. Individuals in the United Kingdom also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
13
Links to other websites
ValuBase may contain links to external websites. ValuBase is not responsible for the privacy practices or content of those websites, and users should review the relevant third party’s privacy notice.
14
Children's privacy
ValuBase is a business valuation tool intended for adult business users and is not directed at children. We do not knowingly seek to collect personal information from children through the valuation tool.
15
Changes to this Privacy Policy
This policy may be updated as the service, legal requirements or supporting technologies change. The “Last updated” date below indicates when the policy was last revised.
Last updated: 11 August 2026
16
Contact us about privacy
If you have a question about this Privacy Policy, personal information processed through ValuBase, or your data-protection rights, please contact us.