Legal
Privacy Policy
How GAP GNX collects, uses and protects your personal information.
Last updated: 2 July 2026.
1. Who we are
This website is operated by GAPGNX Limited (“GAP GNX”, “we”, “us”, “our”), a company registered in England and Wales. We are the data controller responsible for the personal information collected through this website and our services.
Registered company: GAPGNX Limited, Company No. 12013134. Registered office: The Glades, Festival Way, Festival Park, Stoke-on-Trent, Staffordshire, ST1 5SQ. ICO registration: ZB046871.
For any privacy question, or to exercise your rights, contact us at support@gapgnx.com.
2. What this policy covers
GAP GNX provides marketing, lead generation, qualification and appointment-setting services that connect UK financial advice firms with consumers who are actively seeking help. This policy explains how we handle personal information for the people we deal with, including: advice firms and their representatives who enquire about or use our services; consumers who respond to our campaigns and enquiry forms; and people who apply for jobs with us. It also covers how we use cookies and similar technologies on this website.
3. The information we collect
Advice firms and their representatives. When you submit an adviser enquiry or become a partner firm, we collect your name, firm name, work email and phone number, your FCA Firm Reference Number (FRN), authorisation status and principal/network, the advice areas you cover, your appointment capacity and minimum client-asset criteria, and anything you tell us in free-text fields.
Consumers who enquire. When a consumer responds to one of our campaigns, we collect the contact and eligibility information they provide (such as name, contact details and the nature of the financial help they are seeking), and we make and retain recordings of qualification calls as evidence of how each enquiry was qualified.
Job applicants. When you apply for a role, we collect your title and name, email and phone number, address, the position applied for, your suitability confirmations, employment history, availability, anything you tell us about yourself, and your CV.
Website and technical data. When you use this website we collect technical information such as your IP address, device and browser type, pages viewed and referring source, and information collected through cookies and similar technologies (see the Cookie Policy).
4. How we collect it
We collect information directly from you when you complete a form, book a call, apply for a role, or correspond with us; automatically through cookies and analytics when you use the website; and, for consumer enquiries, through the advertising campaigns and landing pages we operate.
5. Why we use your information and our lawful bases
We use personal information to: respond to and qualify enquiries; introduce qualified consumers to advice firms and arrange appointments; provide, manage and improve our services; verify a firm’s FCA authorisation; process job applications; operate, secure and improve the website; measure and improve our marketing; and meet our legal and regulatory obligations.
Depending on the activity, we rely on one or more of the following lawful bases under UK GDPR:
- Consent — for example, where you agree to be contacted, or agree to non-essential cookies and marketing. You can withdraw consent at any time.
- Legitimate interests — to run and grow our business, respond to enquiries, prevent fraud and misuse, and keep our services and website secure, where this is not overridden by your rights.
- Performance of a contract — to deliver services to firms we work with, and to take steps at your request before entering into a contract.
- Legal obligation — to comply with law, regulation and legitimate requests from authorities.
6. Who we share it with
We share personal information only where necessary, with:
- Advice firms — where a consumer has enquired, we introduce their details to a regulated advice firm so the firm can contact them. From that point the firm is an independent controller of that data.
- Service providers acting for us — including our website host, our customer-relationship and workflow platform (GoHighLevel), our email/delivery providers (Microsoft 365 and SendGrid), analytics and advertising providers (such as Google), and our appointment-scheduling provider (Calendly). These providers process data on our instructions under appropriate contracts.
- Verification services — we check firm FRNs against the FCA Register API.
- Professional advisers, regulators and authorities — where required by law, regulation, or to establish, exercise or defend legal claims.
We do not sell your personal information.
7. Marketing
Where you have agreed, or where we are otherwise permitted, we may send you information about our services. You can opt out at any time using the unsubscribe link in our emails or by contacting us. Opting out of marketing does not affect service-related messages.
8. International transfers
Some of our providers may process data outside the UK. Where they do, we take steps to ensure an equivalent level of protection, such as relying on UK adequacy regulations or approved safeguards (for example, the International Data Transfer Agreement or Addendum).
9. How long we keep it
We keep personal information only for as long as necessary for the purposes described above, including to meet legal, accounting, regulatory and dispute-resolution requirements. Qualification-call recordings are retained as evidence in line with our Terms of Engagement. Unsuccessful job-application data is kept for a limited period and then deleted unless you ask us to keep it on file. When information is no longer needed, we securely delete or anonymise it.
10. How we protect your information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration, and we restrict access to those who need it. No transmission or storage method is completely secure, but we work to protect your information and to notify you and the regulator of any breach where required.
11. Your rights
Subject to conditions and exemptions under UK data-protection law, you have the right to: be informed about how we use your data; access a copy of your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and, where processing is based on consent, withdraw that consent. Where decisions are automated, you have rights in relation to those decisions.
To exercise any right, email support@gapgnx.com. We may need to verify your identity. We will respond within the timeframes required by law.
12. Cookies
We use cookies and similar technologies to run the website, understand how it is used, and (with your consent) to measure and target advertising. For full details and to manage your preferences, see our Cookie Policy.
13. Children
Our services and this website are intended for businesses and adults. We do not knowingly collect personal information from children.
14. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, and we will indicate the date it was last updated.
15. Complaints
If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, by calling 0303 123 1113, or by writing to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
GAPGNX Limited · Company No. 12013134 · Registered office: The Glades, Festival Way, Festival Park, Stoke-on-Trent, Staffordshire, ST1 5SQ · ICO: ZB046871.