Minimal and responsible data use
Privacy Notice
This notice explains what personal information Scamology may collect, why it may be used, how it is protected and the rights available under data protection law.
This notice explains how Scamology collects, uses and protects personal information through Scamology.info.
Scamology follows a simple principle: collect and store as little personal information as possible. Information is collected only when there is a clear reason. It is used only for that reason and kept only for as long as it is needed.
1. Who we are
Scamology publishes and operates Scamology.info. Scamology is responsible for the personal information covered by this notice.
Questions about privacy or personal information can be sent through the Contact page.
2. Personal information we collect
The information collected depends on how a person uses the website or its services. It may include:
- A name and contact details supplied with an enquiry.
- The contents of a message and later correspondence.
- Account details when an account is requested or used.
- Order and payment records when a product or service is purchased.
- Answers or feedback supplied during research, testing or evaluation.
- Communication choices, such as a request to receive an update.
- Limited technical information needed to deliver, protect and maintain the website.
Scamology does not ask for more information than the activity requires. Where a service can work without identifying a person, that is the preferred approach.
Payment providers process card or bank details through their own secure systems. Scamology receives only the payment information needed to record and manage the transaction.
3. How we obtain personal information
Most personal information comes directly from the person concerned. This happens when someone sends an enquiry, opens an account, makes a purchase or joins an agreed research activity.
Some limited technical information may be created when the website is visited. Hosting, security and delivery services may process details such as an internet address, browser type, device type and request record.
If information comes from another source, Scamology will record where it came from. Its use will be explained where the law requires this.
4. Why we use personal information
Scamology uses personal information only for a defined purpose and with a lawful basis.
| Purpose | Information normally used | Lawful basis | | --- | --- | --- | | Answer an enquiry or request | Contact details and correspondence | Legitimate interests, or steps requested before a contract | | Provide an account, product or service | Account, order and transaction details | Contract | | Operate and protect the website | Limited technical and security records | Legitimate interests | | Keep records required by law | Relevant account, payment or correspondence records | Legal obligation | | Send an optional update | Contact details and communication choice | Consent | | Conduct agreed research or testing | Information explained when a person takes part | Consent or legitimate interests, as stated at the time |
Legitimate interests means there is a genuine and proportionate reason to use the information. Scamology considers the person’s rights and expects the use to have little effect on their privacy.
Consent can be withdrawn at any time. This will not affect an earlier use that was lawful when consent was in place.
5. How we share personal information
Access is limited to people and service providers who need the information for an agreed task. These may include website hosting, email, payment, secure storage, professional advice or technical support providers.
Each provider receives only the information needed for its role. Providers must protect it and must not use it for their own unrelated purposes.
Information may also be shared where the law requires it. It may be shared when needed to protect a person from serious harm. Only relevant information will be shared.
Scamology does not sell, rent or trade personal information. Personal information is not shared with advertisers for behavioural profiling.
6. International transfers
Some service providers may process information outside the United Kingdom. Where this happens, Scamology uses providers and safeguards that meet UK data protection requirements.
Information transferred overseas remains limited to what the service requires.
7. How long we keep personal information
Personal information is kept only for as long as the purpose requires. Scamology considers:
- Why the information was collected.
- Whether an enquiry, service or transaction is complete.
- Any legal, accounting or safeguarding requirement.
- Whether a dispute could reasonably arise.
- Whether the information can be deleted or made anonymous sooner.
Information that is no longer needed is deleted or securely destroyed. It may instead be changed so that it no longer identifies a person.
8. How we protect personal information
Scamology uses suitable technical and organisational safeguards. Access is restricted, services are chosen with privacy in mind, and the amount of information held is kept low.
People who handle personal information must use it only for its agreed purpose. Suspected loss, misuse or unauthorised access will be assessed and managed under the applicable data protection rules.
9. Cookies and similar technology
Scamology limits cookies and similar technology. They are used only to provide a requested feature, remember a setting or keep the website secure.
Advertising cookies and cross-site behavioural tracking are not part of Scamology’s approach. Any future non-essential analytics will require clear information. Visitors will be given a proper choice before it is used.
10. Artificial intelligence and automated decisions
Artificial intelligence supports parts of Scamology’s research and production work. It is not used to profile website visitors. It does not make decisions about them that have legal or similarly serious effects.
Personal information will not be added to an artificial intelligence system merely because it may be useful. Any use involving personal information must have a defined purpose and follow this notice.
11. Your data protection rights
Depending on the circumstances, a person may have the right to:
- Ask for a copy of their personal information.
- Correct information that is wrong or incomplete.
- Ask for information to be deleted.
- Ask for its use to be restricted.
- Object to a particular use.
- Receive certain information in a portable form.
- Withdraw consent where consent is the lawful basis.
A request can be made through the Contact page. Scamology may need enough information to confirm the requester’s identity. Only what is needed for that check will be requested.
More information about these rights is available from the Information Commissioner’s Office.
12. Questions and complaints
Please contact Scamology first if there is a question or concern about personal information. The matter will be considered and answered as clearly as possible.
A person can also raise a concern with the Information Commissioner’s Office. The ICO is the United Kingdom’s independent data protection regulator.
13. Changes to this notice
This notice will be reviewed when the website, its services or the law changes. The current version and review date will remain available on this page.
Last reviewed: 1 September 2026