Privacy Policy
YOUR DATA, PROTECTED WITH CARE
PRIVACY NOTICE
Last Updated: 23 September 2026
Bloomsbury Consultancy respects your privacy and is committed to protecting the personal data we hold about you.
This Privacy Notice explains how Bloomsbury Consultancy collects, uses, stores and protects personal data when you visit our website, contact us, enquire about our services, become a client, or otherwise interact with us.
It applies to personal data processed by Bloomsbury Consultancy in connection with its website, business activities and advisory services.
1. Who We Are
Bloomsbury Consultancy is an independent advisory business providing private counsel and strategic advisory services.
For the purposes of applicable data protection legislation, Bloomsbury Consultancy will generally act as the controller of the personal data described in this Privacy Notice. In limited circumstances, Bloomsbury Consultancy may process personal data on behalf of another organisation and may act as a processor where applicable.
If you have any questions about how we handle personal data, please contact:
Email: help@bloomsburyconsultancy.com
2. Personal Data We Collect
Depending on the nature of our relationship with you and the circumstances in which we interact with you, we may collect and process the following categories of personal data.
Contact and identification information
This may include:
name;
address;
email address;
telephone number;
date of birth or other identifying information where reasonably necessary; and
information required to verify your identity.
Professional and business information
This may include:
employment and career information;
professional history;
information about businesses, organisations or projects with which you are involved;
information about professional advisers and other individuals connected with your affairs; and
information concerning opportunities, negotiations, engagements or commercial matters.
Information about your circumstances
Depending on the nature of our work, this may include information concerning your personal, financial, professional, legal, reputational or other circumstances where relevant to the services we provide.
Communications and documents
We may retain information contained in:
emails and other electronic communications;
letters and correspondence;
telephone and meeting notes;
documents provided to us;
instructions and records of decisions; and
other information relating to an enquiry or engagement.
Technical and website information
When you use our website, we may collect limited technical information such as your IP address, browser type, device information, operating system, pages visited and information about how you interact with our website.
The information collected will depend on the cookies, analytics and other technologies in use.
We will only use non-essential cookies or similar technologies where the applicable legal requirements, including consent requirements where applicable, have been satisfied.
3. Where We Obtain Personal Data
We may obtain personal data:
directly from you;
from your authorised representatives or professional advisers;
from documents or information you provide to us;
from individuals or organisations where you have authorised us to obtain information;
from publicly available sources where reasonably necessary for our services;
from professional service providers or other organisations involved in your matter;
through our website, including enquiry and contact forms; and
from service providers supporting the operation of our business or website.
Where we obtain personal data from a source other than the individual concerned, we will provide the information required by applicable data protection law, subject to any applicable exemption.
4. How We Use Personal Data
We may use personal data for the following purposes.
Providing our services
We may use personal data to:
understand your circumstances and requirements;
provide advisory and strategic support;
communicate with you;
review documents and information relevant to your engagement;
coordinate with your authorised professional advisers;
assist with matters and opportunities within the agreed scope of our engagement; and
maintain appropriate records of our work.
Managing our relationship with you
We may use personal data to:
respond to enquiries;
arrange consultations and meetings;
administer engagements and retainers;
issue invoices and process payments;
manage communications; and
provide client support.
Business, legal and regulatory purposes
We may also process personal data to:
maintain appropriate business and financial records;
comply with legal or regulatory obligations;
establish, exercise or defend legal rights and claims;
identify and manage potential conflicts of interest;
maintain appropriate insurance and risk-management records;
prevent fraud or other unlawful activity; and
protect the security of our systems, information and business.
Website and communications
We may use personal data to:
operate and secure our website;
understand and improve how our website is used;
improve our services; and
respond to communications or enquiries submitted through the website.
We do not sell personal data.
5. Lawful Bases for Processing
We will only process personal data where we have a lawful basis under applicable data protection legislation.
Depending on the circumstances, this may include:
Contract
We may process personal data where necessary to enter into or perform a contract with you, including providing services under an Engagement Letter or other agreement.
Legitimate interests
We may process personal data where this is necessary for our legitimate interests, provided those interests are not overridden by your interests, rights or freedoms.
Our legitimate interests may include:
operating and managing Bloomsbury Consultancy;
providing and improving our services;
communicating with clients and prospective clients;
managing client relationships;
maintaining appropriate professional and business records;
managing conflicts and risks;
protecting confidential information and systems; and
establishing, exercising or defending legal claims.
Where we rely on legitimate interests, we will consider the nature of the processing and its potential impact on the individual concerned.
Legal obligation
We may process personal data where necessary to comply with a legal or regulatory obligation.
Consent
Where appropriate or legally required, we may rely on your consent for a particular form of processing.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
6. Special Category Data
Because of the private and sensitive nature of some of our advisory work, we may receive or process special category personal data where reasonably necessary.
This may include information concerning:
health;
racial or ethnic origin;
religious or philosophical beliefs;
political opinions;
sexual orientation;
biometric or genetic information, where relevant; or
other categories recognised as special category data under applicable law.
We do not seek to collect special category data unless it is reasonably necessary for the relevant purpose.
Where we process special category data, we will identify an applicable lawful basis under Article 6 of the UK GDPR and an applicable condition under Article 9, together with any additional safeguards required by law.
Where appropriate and legally available, this may include processing necessary for the establishment, exercise or defence of legal claims.
7. Sharing Personal Data
We do not sell personal data.
We may share personal data where reasonably necessary for the purposes described in this Privacy Notice, including with:
lawyers, solicitors, barristers and other legal advisers;
accountants, tax advisers and financial professionals;
agents, public relations advisers, investigators or other specialist advisers;
consultants and other professional advisers;
IT, communications, cloud-storage and other technology providers;
payment providers, banks and accounting service providers;
insurers and professional advisers supporting our business; and
regulators, law enforcement bodies, courts or other competent authorities where required or permitted by law.
We may also disclose information to other individuals or organisations where you have authorised us to do so.
Where we coordinate with your professional advisers, we will normally do so with your authority or where disclosure is otherwise permitted or required by law.
Where a third party processes personal data on our behalf, we will take appropriate steps to ensure that the processing is subject to appropriate contractual and security arrangements.
8. International Transfers
We aim to keep personal data within the UK where reasonably practicable.
However, some technology, communications, cloud-storage or professional service providers may process personal data outside the UK.
Where personal data is transferred outside the UK, we will only make the transfer where permitted by applicable data protection law and will use an appropriate legal transfer mechanism and safeguards where required.
Further information about a particular international transfer or the safeguards applying to it can be requested by contacting us.
9. How We Protect Personal Data
We take reasonable and proportionate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Access to client information is restricted to those who reasonably need access to perform their role.
Because of the confidential nature of our work, everyone working with or for Bloomsbury Consultancy is expected to handle personal and confidential information appropriately and securely.
No method of electronic transmission or storage is completely secure. However, we take reasonable steps to reduce the risks associated with handling personal data.
10. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary for legal, regulatory, insurance, accounting, professional, evidential or legitimate business purposes.
Different categories of information may therefore be retained for different periods.
When determining how long information should be retained, we consider factors including:
the nature and sensitivity of the information;
the purpose for which it was collected;
whether it is required for an ongoing client relationship;
applicable legal, regulatory, accounting or insurance requirements;
potential legal claims or disputes; and
legitimate business requirements.
Our Document Retention & Secure Destruction Schedule sets out standard retention periods for principal categories of records.
When personal data is no longer required, we will securely delete, destroy or anonymise it where appropriate.
11. Your Data Protection Rights
Subject to applicable legal conditions and exemptions, you may have the right to:
request access to personal data we hold about you;
ask us to correct inaccurate or incomplete personal data;
request erasure of your personal data in certain circumstances;
request restriction of processing in certain circumstances;
object to certain processing, including processing based on legitimate interests;
request portability of certain personal data where the right applies;
withdraw consent where we rely on consent as our lawful basis; and
object to direct marketing.
The availability of these rights depends on the circumstances and the lawful basis on which we process your personal data.
To exercise a data protection right, please contact:
help@bloomsburyconsultancy.com
We may need to verify your identity before responding to a request.
We will respond within the applicable statutory timeframe.
12. Direct Marketing
We do not sell or commercially trade personal data.
Where we send marketing communications, we will comply with applicable data protection and electronic communications legislation.
You may ask us to stop sending marketing communications at any time by contacting us or, where applicable, using the unsubscribe option provided in the communication.
13. Cookies and Website Analytics
Our website may use cookies and similar technologies.
Some cookies may be strictly necessary for the website to operate, while others may be used for analytics or other purposes.
Where consent is required for a non-essential cookie or similar technology, we will seek consent before using it.
The specific cookies and analytics technologies used on our website may change from time to time. Where applicable, our cookie settings or cookie notice will provide further information about the technologies in use and how you can manage your preferences.
You can also control or delete cookies through your browser settings, although disabling certain cookies may affect website functionality.
14. Automated Decision-Making
We do not use personal data to make decisions about clients based solely on automated processing where those decisions produce legal or similarly significant effects.
If this changes, we will update this Privacy Notice and provide any information required by applicable law.
15. Confidentiality
Our advisory work is private and confidential.
This Privacy Notice concerns the processing of personal data and does not replace any separate confidentiality obligations applying to your relationship with Bloomsbury Consultancy.
Where applicable, confidentiality obligations may be set out in an Engagement Letter, Confidentiality Agreement, Client Terms or other applicable agreement.
16. Personal Data Breaches
We maintain procedures for identifying, managing and responding to personal data breaches.
Where a personal data breach is subject to a notification requirement under applicable law, we will notify the Information Commissioner's Office and/or affected individuals within the applicable statutory timeframe.
Not every personal data breach is required to be reported. The applicable notification requirements depend on the circumstances and level of risk arising from the breach.
17. Complaints
If you have concerns about how Bloomsbury Consultancy has handled your personal data, we encourage you to contact us first so that we can investigate and address the matter.
Please contact:
help@bloomsburyconsultancy.com
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
Further information about the ICO and its complaints process is available on the ICO's website.
18. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our services, business practices, technology or applicable law.
The current version will be published on our website with its effective date.
We encourage you to review this Privacy Notice periodically.
19. Contact Us
If you have any questions about this Privacy Notice or how Bloomsbury Consultancy processes personal data, please contact:
Bloomsbury Consultancy
Email: help@bloomsburyconsultancy.com
Website: www.bloomsburyconsultancy.com
Last Updated: 23 September 2026