Privacy Notice

Contact Details

What Information We Collect, Use, and Why

To provide and improve our services

We collect or use the following information to provide and improve products and services for clients:

• Names and contact details
• Addresses
• Gender and pronoun preferences
• Occupation
• Payment details (including card or bank information for transfers and direct debits)
• Transaction data (including details about payments to and from you and details of products and services purchased)
• Usage data (including information about how you interact with our website, products and services)
• Records of meetings and decisions
• Account access information
• Website user information

For information updates and marketing

We collect or use the following information for marketing and communications purposes:

• Names and contact details
• Addresses
• Profile information
• Marketing preferences
• Purchase or account history
• Website and app user journey information
• IP addresses

Lawful Bases and Your Data Protection Rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. Which lawful basis we rely on may affect your data protection rights. You can find out more on the ICO's website.

Your rights at a glance

Where applicable, you may have the following rights. We must respond to any request without undue delay and within one month. To make a request, contact us using the details above.

Our lawful bases for providing and improving services

• Consent — we have your permission after providing all relevant information. All data protection rights apply except the right to object. You may withdraw consent at any time.
• Contract — we need the information to enter into or carry out a contract with you. All data protection rights apply except the right to object.

Our lawful bases for marketing and updates

• Consent — we have your permission after providing all relevant information. All data protection rights apply except the right to object. You may withdraw consent at any time.

Where We Get Personal Information From

• Directly from you
• Publicly available sources
• Suppliers and service providers

How Long We Keep Information

For information on how long we store your personal information, or the criteria we use to determine retention periods, please contact us using the details provided in section 01.

Who We Share Information With

Data processors

We use the following third-party data processors who act on our instructions:

• Mailgun Technologies, Inc. — sends emails programmatically on our behalf
• Railway Corporation — Provides computing, and storage infrastruture
• Google — provides our business productivity, email, document storage and collaboration tooling

Others we share information with

• Organisations we are legally obliged to share information with
• Professional consultants

Sharing Information Outside the UK

Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, ensuring appropriate safeguards are in place. For further information or to obtain a copy of the relevant safeguard, please contact us.

Some of our service providers may transfer personal data outside the United Kingdom, including to the European Economic Area and the United States. Where this occurs, we ensure appropriate safeguards are in place, such as adequacy regulations or Standard Contractual Clauses approved for use in the UK.

How to Complain

If you have any concerns about our use of your personal data, please raise them with us first using the contact details in section 01. We will do our best to resolve any issue promptly.

If you remain unhappy after raising a complaint with us, you can complain to the Information Commissioner's Office (ICO):