Privacy and data processing

This notice explains how The Brokers Terminal handles personal data. It covers two things: the details of the people who subscribe (where we decide how data is used), and the client details that subscribers record in their client book (where the subscriber's firm decides, and we process the data for them).

1. Who we are

The Brokers Terminal is a trading name of De-Int Ltd, registered in England and Wales, company number 16478594. Registered office: 71-75 Shelton Street, London WC2H 9JQ. Contact for anything about personal data: desk@thebrokersterminal.com.

2. Two roles

3. Subscriber data

What we hold

• Account details: name, work email, firm, position, password (stored as a one-way hash by our authentication provider).
• Billing: plan, payments and TBT balance. Card details are held by Stripe, never by us.
• Use of the terminal: reports read, features used, questions asked of Intel, and posts and comments on your firm's desk wall.
• Pages visited: which pages of the website and terminal you open, how you arrived (for example from one of our emails) and how long each page was on screen. Visitors who are not signed in are counted anonymously, with no cookies and nothing stored on their device.

Why, and on what basis

• To provide the service you subscribed to (contract).
• To keep it secure, prevent misuse and improve it (legitimate interests).
• To send service emails and the notifications you choose; you can switch notifications off in the terminal at any time (contract and legitimate interests).
• To keep financial records as the law requires (legal obligation).

4. Client data in the client book

Subscribers can record details about their own clients to prepare for conversations: names, ages, family circumstances, income, assets and holdings, objectives and attitude to risk, follow-ups and notes. The subscriber's firm is responsible for having a lawful basis to record this and for telling its clients.

• Private to the subscriber. Client details are visible only to the person who entered them, not to others at their firm or to us in the normal course of running the service.
• No special category data. The fact find does not ask about health, and subscribers are told not to enter health information, account numbers or passwords.
• Reports. When a subscriber makes a wealth review, IFA brief or client report, the relevant fact find details are used to write it, including by our AI provider (see section 6).
• Deleting. A deleted client can be restored for 30 days, then is erased for good with the reports and briefs made for them. A subscriber can also erase a client straight away.
• Copies. A subscriber can export everything held about a client, to answer that client's request for a copy.

5. Data processing terms (for subscribing firms)

For client data, we act as a processor under UK GDPR Article 28. We:

• process it only on the firm's documented instructions, which are the use of the terminal's features;
• make sure everyone with access is bound by confidentiality;
• keep it secure (section 8);
• use only the sub-processors in section 6, and tell firms before adding or changing one;
• help the firm answer requests from its clients to see, correct or erase their data;
• tell the firm without undue delay if we become aware of a personal data breach affecting their data;
• help with data protection impact assessments where needed;
• delete client data when the firm's subscription ends, after 30 days in which the firm can export it, unless the law requires us to keep it;
• make available the information needed to show we meet these terms.

6. Who processes data for us

Where data goes outside the UK, we rely on the UK's adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework), or, where a provider is not certified, the ICO's International Data Transfer Agreement or Addendum.

Market data, news and official statistics come from outside sources but contain no personal data from subscribers or their clients.

7. How long we keep it

• Subscriber accounts: while the subscription is active, then 30 days (time to export), after which they are deleted.
• Financial records: six years, as the law requires.
• Client book: until the subscriber deletes it (erased 30 days later) or the subscription ends (section 5).
• Notifications: shown for 30 days, then deleted automatically.
• Page visit records: 13 months, then deleted automatically.

8. Security

• Data is encrypted in transit and at rest.
• Database rules mean each subscriber can only reach their own client records and their own firm's shared content.
• Report files are private and served only through short-lived signed links.
• Access to production systems is limited to the people who run the service.
• If a breach is likely to put people's rights at risk, we report it to the ICO within 72 hours and tell affected firms without undue delay.

9. Your rights

You can ask to see, correct, erase or restrict use of your personal data, ask for a copy in a portable form, and object to some uses. For client data in a subscriber's client book, please contact the firm you deal with: they are responsible for it, and we help them answer. To use your rights, email desk@thebrokersterminal.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

10. Changes

We will update this notice when how we handle data changes, and tell subscribers about significant changes.

Last updated: 18 October 2026.