Privacy policy
Last updated: 16 September 2026
This policy explains what Four Nine Nine Ltd, trading as 499 Group ("we", "us"), does with personal data when you use this website, www.499group.com, or contact us through it.
Who we are
Four Nine Nine Ltd is the data controller. We are registered with the UK Information Commissioner's Office (ICO) under number ZB972596. Registered address: 3rd Floor, 86-90 Paul St, London EC2A 4NE, United Kingdom. You can reach us about anything in this policy at contact@499group.com.
What this policy covers
This policy covers this corporate website only. The consumer brands we operate (for example SaversStandard, BobCanFixYourHouse, SeekYourJustice, National Debt Registry and TopQuotesHero) are separate websites with their own privacy policies, which explain how those sites handle personal data.
The data we process, and why
When you send us an inquiry
The contact form asks for your name, company, work email address, what you are interested in and your message. We use this to reply to you and to take the inquiry forward. Our legal basis is our legitimate interest in responding to business inquiries and, where you are inquiring on behalf of a business that may become a customer or partner, taking steps prior to entering into a contract.
The form is delivered to our inbox by email through Resend, a transactional email provider that acts as our processor. Inquiries are kept in our mailbox for as long as we need them to handle the inquiry and any business relationship that follows. Inquiries that do not lead to a relationship are deleted within twelve months.
We do not add form submissions to marketing lists and we do not sell personal data.
Protecting the form from automated abuse
The form uses Cloudflare Turnstile to check that it is being submitted by a person. Turnstile may process your IP address and information about your browser and device in order to make that check. Cloudflare acts as our processor. Our legal basis is our legitimate interest in keeping the form usable and secure.
Hosting and security logs
This website is served by Cloudflare. Like any web host, Cloudflare records technical information about requests, including IP address, browser type and the pages requested, to deliver the site and to detect and prevent abuse. These logs are kept for a short period and are not used to identify visitors. Our legal basis is our legitimate interest in operating a secure website.
Analytics, only with your consent
We use Google Analytics 4 to understand how the site is used: which pages are visited, roughly where visitors come from and which devices they use. Google Analytics runs only if you choose "Accept" in the cookie notice; until then no analytics cookies are set and nothing is sent to Google. IP addresses are truncated before storage. Google LLC acts as our processor and may transfer data to the United States under the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses. You can change your choice at any time with the "Cookie settings" link in the footer, and you can also block Google Analytics with Google's opt-out add-on.
Cookies and local storage
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| 499-consent | This site (local storage) | Remembers whether you accepted or declined analytics | 12 months |
| 499-theme | This site (local storage) | Remembers your light or dark appearance choice | Until cleared |
| _ga, _ga_* | Google Analytics (only after consent) | Distinguishes visitors and sessions for usage statistics | Up to 2 years |
| cf_clearance and similar | Cloudflare | Security and bot protection for the form and the site | Up to 1 year |
Who we share data with
We share personal data only with the service providers named above (Cloudflare, Resend and, after consent, Google), each acting on our instructions, and where the law requires us to. We do not share inquiry data with our consumer brands' advertisers or partners unless you ask us to introduce you.
International transfers
Our providers may process data outside the United Kingdom, including in the United States. Where they do, transfers are covered by the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
Your rights
Under UK data protection law you can ask us for access to your personal data, ask us to correct or delete it, object to or restrict our processing, ask for a copy in a portable format, and withdraw consent where consent is our basis. To exercise any of these rights, email contact@499group.com. We reply within one month. You also have the right to complain to the ICO at ico.org.uk, although we would welcome the chance to address your concern first.
Children
This website is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.
Changes to this policy
When we change this policy we update the date at the top of this page. Material changes will be flagged on this page for a period after they take effect.