Last updated: July 2026.

Who we are and who controls your data

This website is operated by EHNT Ltd, a company registered in England and Wales (company number 17004508), registered address 86-90 Paul Street, London EC2A 4NE.

EHNT Ltd is the data controller for the personal data collected through this website. This means we determine how and why your data is used, and we are responsible for keeping it safe. EHNT Ltd is registered with the Information Commissioner's Office (ICO) as a data controller (registration reference: ZC107822).

EHNT Ltd is an independent company and a Shift4 partner. We are not a payment provider, bank, acquirer, or POS vendor. Where appropriate, EHNT Ltd may introduce you to Shift4 for payment, POS, loyalty, gift card, or online ordering services. Shift4 is responsible for its own products, contracts, pricing, onboarding, and privacy information.

What data we collect

When you submit an enquiry through this site we collect:

• Your name and contact details (email address; phone number if provided)
• Your business name, type, and location
• Information about your current payment setup
• Approximate transaction volumes, where you provide them in a form or payment check

We do not collect payment card details. We do not use cookies for tracking or advertising.

Some pages embed a customer video hosted by Vimeo. We use Vimeo's “Do Not Track” embed mode, which instructs Vimeo not to set tracking cookies or collect viewing analytics. The video content itself is served by Vimeo, Inc. when the player loads. Our forms are protected by Cloudflare Turnstile, which processes technical signals (such as your IP address) to distinguish people from bots; see Cloudflare's privacy documentation for details.

Why we collect it and our legal basis

We use your data to:

• Respond to your enquiry and provide a payment review or recommendation
• Match you with appropriate merchant payment solutions
• Follow up in connection with services you have expressed interest in

Our legal basis for processing is legitimate interests (Article 6(1)(f) UK GDPR). You contacted us to enquire about our services, and we have a legitimate interest in responding and following up. We have balanced this against your interests and rights — we only collect what is necessary, we do not sell your data, and you can ask us to stop at any time.

How long we keep your data

We retain enquiry data for up to 12 months from the date of your last contact with us. If you proceed with a referral to a payment provider, we may retain a record for up to 36 months for our business records. You can ask us to delete your data at any time — see your rights below.

Who we share your data with

We do not sell your data. We may share relevant details in the following circumstances:

• People working with EHNT Ltd — your enquiry data may be handled by people working with EHNT (for example, a local reviewer who follows up your request) for the purpose of carrying out your review.
• Shift4 — where you decide to proceed with an introduction to Shift4, we share relevant details with Shift4 for the purpose of setting up your account. Shift4 is an independent data controller for data it receives and holds, and provides its own privacy information.
• Other selected partners — where the review suggests a selected payment, POS, ecommerce, website or business-service partner may be a better fit for your needs, we will ask for your permission before sharing your details with that partner. Each partner is an independent data controller for data it receives.

When you submit an enquiry you are requesting a payment review from EHNT Ltd. As part of that service, your details are used to assess your requirements and identify the right setup — which may include introducing you to Shift4 or another selected partner. We will not pass your details to any provider unless you choose to proceed with an introduction.

Data security

Enquiry data is stored on a secured private server in the EU. All data in transit is encrypted via HTTPS. Access to enquiry data is restricted to authorised personnel only.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Restriction — ask us to limit how we use your data
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, email us at [email protected]. We will respond within one calendar month.

Right to complain

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to this notice

We may update this notice from time to time. The date at the top of this page shows when it was last revised. Continued use of the site after an update constitutes acceptance of the revised notice.

Contact

For any privacy-related questions, email [email protected].