Privacy Policy

1.0 Introduction

LastingAsset ("we," "us," or "our") operates the UnDoubt website and mobile application (collectively, the "Services"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Services.

We are committed to transparency and minimal data collection. We only collect the information necessary to provide and improve our Services.

We are registered with the Information Commissioner’s Office (ICO) under number ZC028210 and we follow UK data-protection law.

2.0 Scope

This Privacy Policy applies to:

  • The UnDoubt website (undoubt.com)
  • The UnDoubt mobile application (iOS and Android)

3.0 Information We Collect

3.1 Information You Provide Directly

Mobile App:

  • Phone Number (Required): We collect your phone number when you use the UnDoubt mobile app. This is necessary to provide our core Services but will not be retained. 
  • Email Address (Optional): If you choose to provide feedback through the app, you may optionally provide your email address so we can respond to your feedback.

Website:

  • Email Address (Optional): You may optionally provide your email address through our website contact forms or feedback mechanisms.

3.2 Information We Do NOT Collect

We want to be clear about what we don't collect:

  • We do not use cookies or similar tracking technologies
  • We do not collect your name, physical address, or payment information
  • We do not collect device identifiers, IP addresses, or location data
  • We do not track your browsing behaviour or usage analytics
  • We do not collect any information automatically through cookies, web beacons, or similar technologies

4.0 How We Use Your Information

We use the limited information we collect for the following purposes:

Phone Numbers:

  • To provide and maintain the UnDoubt service
  • To verify your identity and prevent fraud
  • To communicate service-related information

Email Addresses:

  • To respond to your feedback or inquiries (only if you've provided your email for this purpose)
  • To send service-related communications if necessary

5.0 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and the UK, we process your personal information based on:

  • We process personal data on the basis of legitimate interests in providing, maintaining and improving our services. This includes user account set-up, security monitoring and ensuring platform integrity.
  • Marketing communications: This will be processed on the basis of consent and individuals can opt-out at any time. We will only send you marketing communications — such as newsletters, updates, or information about new features — if you have given us your consent. 

6.0 How We Share Your Information

We do not sell, rent, or trade your personal information to third parties.

We may share your information only in the following limited circumstances:

  • Service Providers: We may share information with trusted third-party service providers who assist us in operating our Services, but only to the extent necessary for them to perform their functions
  • Legal Compliance: We may disclose information if required by law, court order, or governmental authority
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity
  • Protection of Rights: We may disclose information to protect the rights, property, or safety of LastingAsset, our users, or others

7.0 Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8.0 Data Retention

  • Phone Numbers: We retain your phone number for as long as you maintain an active account with us
  • Email Addresses: We retain email addresses provided for feedback purposes for as long as necessary to respond to your inquiry and maintain records of our communications

When you delete your account or request deletion of your data, we will delete or anonymize your information within 30 days, except where we are required to retain it for legal or regulatory purposes.

9.0 Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 General Rights

  • Access: Request access to the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Objection: Object to our processing of your information
  • Data Portability: Request a copy of your information in a portable format

9.2 For EEA Users (GDPR)

You have additional rights under the General Data Protection Regulation (GDPR), including:

  • The right to withdraw consent at any time
  • The right to lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us at privacy@lastingasset.com.

10.0 International Data Transfers

If you are accessing our Services from outside the country where our servers are located, please be aware that your information may be transferred to, stored, and processed in a different country. We take appropriate safeguards to ensure your information receives adequate protection.

11.0 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Posting the updated Privacy Policy on our website and in our app
  • Updating the "Last Updated" date at the top of this policy
  • Providing notice through the Services or via email (if we have your email address)

Your continued use of the Services after changes are posted constitutes your acceptance of the updated Privacy Policy.

12.0 Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

13.0 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

LastingAsset
Email: privacy@lastingasset.com
Address: c/o Johnston Carmichael, 7-11 Melville Street, Edinburgh, EH3 7PE, Scotland

Your Privacy Matters: This Privacy Policy reflects our commitment to protecting your privacy while providing you with valuable Services. We collect only what we need and treat your information with respect.

Effective Date: 19th February 2026

Last Updated: 19th February 2026

Version: Version 1