Privacy Policy

Last updated: 21 June 2026

This privacy policy explains how Smart Exit collects, uses, shares and protects the personal information you provide when you use this website or get in touch with us. Please read it alongside our Terms of Service.

1. Who we are

Smart Exit is a trading name of Rockstar Retirement Ltd, a company registered in England and Wales under company number 17106568, with its registered office at Unit 32 St. Asaph Business Park, St. Asaph, Wales, LL17 0JA. For the purposes of data protection law, Rockstar Retirement Ltd is the data controller responsible for your personal information. If you have any questions about this policy or how we handle your data, you can email us at [email protected].

2. The information we collect

We collect information that you give us directly, and a limited amount of information that is collected automatically when you visit the site.

Information you give us. When you complete a form or contact us, we collect the details you choose to provide. This typically includes your name, email address, telephone number, business name and the content of any message or enquiry. If you complete the Exit Readiness Score assessment, we also collect the answers you give about your business. If you request a copy of our guide, we collect the name and email address you submit so that we can send it to you.

Information we collect automatically. Like most websites, we collect some technical information automatically through cookies and similar technologies. This may include your IP address, browser type, device information, the pages you view and how you arrived at the site. We use this to keep the site secure and to understand how it is used. See the section on cookies below.

3. How we use your information and our lawful basis

We only use your personal information where the law allows us to. The main ways we use it, and our lawful basis under the UK GDPR, are set out below.

To respond to your enquiry, arrange a consultation and discuss how we might work together. Our lawful basis is our legitimate interest in responding to people who contact us, and taking steps at your request before entering into a contract.

To send you the guide or other resource you have requested, and related follow-up about that resource. Our lawful basis is your consent, which you give when you submit the request and which you can withdraw at any time.

To provide your Exit Readiness Score result. Our lawful basis is taking steps at your request, and our legitimate interest in providing the service you have asked for.

To operate, secure and improve the website, including analytics. Our lawful basis is our legitimate interest in running a safe and effective website, and your consent where it is required for non-essential cookies.

To comply with our legal and regulatory obligations. Our lawful basis is compliance with a legal obligation.

4. Marketing

We will only send you marketing communications where you have agreed to receive them, or where we are otherwise permitted to do so by law. Every marketing email includes an unsubscribe link, and you can ask us to stop at any time by emailing [email protected].

5. Who we share your information with

We do not sell your personal information. We share it only where necessary, and only with parties who are required to keep it secure. This may include service providers who help us run our website and business, such as web hosting, email delivery, form processing and customer relationship management providers. It may also include professional advisers where relevant, and public authorities or regulators where we are required to share information by law. Where a provider processes data on our behalf, we put an appropriate agreement in place requiring them to protect it.

6. International transfers

Some of our service providers may process data outside the United Kingdom. Where that happens, we take steps to ensure your information receives an equivalent level of protection, for example by relying on adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement.

7. How long we keep your information

We keep your personal information only for as long as we need it for the purposes set out in this policy. Enquiry and contact details are generally kept for up to 24 months after our last contact with you, unless we enter into an ongoing professional relationship, in which case we keep them for the duration of that relationship and for as long afterwards as we are required to for legal, accounting or regulatory reasons. You can ask us to delete your information sooner at any time.

8. Keeping your information secure

We use appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard the data you share with us.

9. Your rights

Under data protection law you have a number of rights in relation to your personal information. You have the right to be informed about how we use it, the right to access a copy of it, and the right to have inaccurate information corrected. You may also have the right to have your information erased, to restrict or object to how we use it, and to ask us to transfer it to another provider. Where we rely on your consent, you can withdraw it at any time. To exercise any of these rights, please email [email protected], and we will respond within the time limits set by law.

10. Cookies

Cookies are small files placed on your device when you visit a website. We use cookies that are necessary for the site to function, and, where you give your consent, cookies that help us measure and improve how the site performs. You can control or delete cookies through your browser settings at any time, although disabling some cookies may affect how the site works.

11. Links to other websites

Our website may contain links to other websites. This policy applies only to our site, so we encourage you to read the privacy policy of any other website you visit.

12. Children

Our website and services are intended for business owners and are not directed at children. We do not knowingly collect personal information from anyone under the age of 18.

13. Changes to this policy

We may update this policy from time to time. The version published on this page is the one that applies, so please check back periodically. Where changes are significant, we will take reasonable steps to bring them to your attention.

14. How to contact us or complain

If you have any questions about this policy, or you would like to exercise your rights, please email us at [email protected] or write to us at Unit 32 St. Asaph Business Park, St. Asaph, Wales, LL17 0JA. If you are not satisfied with how we have handled your information, you have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.