Report an Incident
Report an Incident

The SEPI Agency - Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Operated by NABU Systems Ltd

LAST UPDATED: 14-JUL-2026
SECTION 2 - WHO WE ARE
SECTION 1 - INTRODUCTION

The SEPI Agency (UK) — Supernatural, Extra‑terrestrial & Paranormal Investigations — is committed to protecting your privacy and handling your personal information responsibly, transparently, and in full compliance with UK data protection law.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website, submit a case, or engage with our investigative services.

We operate under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. NABU Systems Limited is registered with the Information Commissioner’s Office (ICO).

SECTION 3 - WHAT INFORMATION WE COLLECT

Data Controller: NABU Systems Limited 22–24 Elm Road Leigh‑On‑Sea Essex SS9 1SN United Kingdom

ICO Registration Reference: ZC154608 Registration Date: 22 May 2026 Expiry: 21 May 2027 Payment Tier: Tier 1

Trading / Operating Name: The SEPI Agency (UK)

All personal data collected through The SEPI Agency (UK) is controlled and processed by NABU Systems Limited.

Contact: contact@sepi-agency.com

SECTION 5 - LAWFUL BASES FOR PROCESSING

We may collect the following categories of personal data:

  • Contact information: name, email address, phone number.

  • Case submission details: descriptions of incidents, locations, dates, media files, witness statements.

  • Technical data: IP address, browser type, device information, cookies, and analytics data.

  • Communication records: emails, messages, and enquiry history.

  • Operational data: information required for scheduling investigations, safety assessments, or follow‑up actions.

We do not knowingly collect data from children under 13 without parental consent.

SECTION 4 - HOW WE USE YOUR INFORMATION

We process your data only when we have a lawful basis under UK GDPR. Typical purposes include:

  • Responding to enquiries or case submissions.

  • Conducting investigations and maintaining case records.

  • Improving our website, services, and user experience.

  • Maintaining safety, security, and operational integrity.

  • Fulfilling legal obligations or cooperating with law enforcement when required.

  • Managing subscriptions, newsletters, or updates (only with your consent).

We do not sell, rent, or trade your personal information.

SECTION 11 - CHANGES TO THIS POLICY

Under UK GDPR, we rely on one or more of the following lawful bases:

  • Consent — when you voluntarily submit information or opt into communications.

  • Contract — when processing is necessary to provide services you request.

  • Legal obligation — when required by UK law or regulatory bodies.

  • Legitimate interests — for operational efficiency, security, and service improvement.

SECTION 6 - DATA SHARING

We may share your data only when necessary:

  • With trusted service providers (e.g., secure hosting, email delivery).

  • With law enforcement or regulatory bodies when legally required.

  • With team members or investigators directly involved in your case.

All third parties are required to comply with UK GDPR and maintain strict confidentiality.

SECTION 7 - DATA STORAGE & SECURITY

We use industry‑standard security measures to protect your data from unauthorised access, alteration, disclosure, or loss. These include:

  • Encrypted storage

  • Secure servers located in the UK or GDPR‑compliant regions

  • Access controls and authentication

  • Regular security reviews

We retain personal data only for as long as necessary for the purposes described in this policy.

SECTION 8 - YOUR RIGHTS UNDER UK GDPR

You have the following rights regarding your personal data:

  • Right to access — request a copy of your data.

  • Right to rectification — correct inaccurate information.

  • Right to erasure — request deletion of your data.

  • Right to restrict processing — limit how your data is used.

  • Right to data portability — receive your data in a transferable format.

  • Right to object — oppose certain types of processing.

  • Right to withdraw consent — at any time.

To exercise any of these rights, contact us using the details above.

SECTION 9 - COOKIES & TRACKING TECHNOLOGIES

Our website may use cookies and similar technologies to:

  • Improve functionality

  • Analyse website traffic

  • Enhance user experience

You can manage or disable cookies through your browser settings.

SECTION 10 - EXTERNAL LINKS

Our website may contain links to external sites. We are not responsible for the privacy practices or content of third‑party websites.

SECTION 12 - CONTACT US

For questions, concerns, or data requests, contact:

NABU Systems Limited

22–24 Elm Road, Leigh‑On‑Sea, Essex, SS9 1SN. United Kingdom.

Email: support@nabu-systems.com

ICO Registration: ZC154608