Privacy Policy

Audit My Pension (“AMP”, “we”, “us”) is an independent public-sector pension audit service. We are the data controller for the personal data described in this notice. Our registered company details and ICO registration are being finalised ahead of launch and will be published here.

You can contact us about anything in this notice at contact@auditmypension.co.uk.

Depending on which forms you use, we may collect:

• Contact details — your name, email address, phone number and postal address.
• Pension details — your scheme (for example NHS), membership status, and what prompted your enquiry.
• Identity details, only when you sign a Letter of Authority — your date of birth, National Insurance number, scheme membership or reference number, and most recent employer. We need these so the scheme administrator can locate your record.
• Documents you choose to share with us — for example pension statements or award letters.
• Correspondence — emails, form submissions and postal correspondence with the team.

We collect this directly from you, through the forms on this website, by email or by post. We do not buy data about you, and this website does not use advertising trackers or analytics cookies.

• To respond to your enquiry and set up your audit — necessary to take steps at your request before entering a contract, and to perform that contract.
• To act on your behalf with a pension scheme administrator — based on the authority you give us in a signed Letter of Authority, which you can withdraw at any time.
• To send you the self-audit guide or register your interest in a scheme that has not opened yet — with your consent, which you can withdraw at any time.
• To keep records of our work and correspondence — our legitimate interest in running the service properly and being able to evidence what we did.

We do not use your data for automated decision-making or profiling, and we never sell it.

• Pension scheme administrators (for example NHS Pensions), only under a Letter of Authority you have signed.
• Our case-management platform (Pension Engine), where enquiry and case records are stored securely.
• Service providers who process data on our instructions — website hosting (Vercel), our database provider (Convex) and our email provider (Resend). Each is bound by contract to protect your data.
• Professional advisers, regulators or law enforcement where the law requires it.

We keep enquiry records that do not become cases for up to 24 months, then delete them. Case records, including signed Letters of Authority, are kept for 6 years after the case closes, in line with standard limitation periods, then securely deleted. If you withdraw a Letter of Authority we stop acting on it immediately, though we keep a record that it existed and was withdrawn.

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Ask us to delete your data.
• Restrict or object to how we use it.
• Receive your data in a portable format.
• Withdraw consent at any time, where consent is our basis for processing.

To use any of these rights, email contact@auditmypension.co.uk. We respond within one calendar month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

This website does not set advertising or analytics cookies. Our hosting provider may set strictly necessary cookies needed to serve the site securely. If that changes, we will update this notice and ask for consent where the law requires it.

If we change how we handle personal data, we will update this page and revise the date at the top. Significant changes affecting existing clients will be notified directly.