Legal
Privacy Policy
How Bishopsgate Vector collects, uses and protects personal data when you contact us, use this website, or engage our services.
1. Introduction
This Privacy Policy explains how Bishopsgate Vector collects and processes personal data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It covers visitors to this website, people who make enquiries, and contacts at client and prospective client firms.
2. Data controller
Bishopsgate Vector Advisory Limited is the controller of personal data collected through this website. The company is registered in England & Wales under company number 17241863. For data protection matters, contact us at info@bishopsgatevector.com.
3. The personal data we collect
We may collect and process the following categories of personal data:
- Enquiry and contact data — name, firm, role/job title, email address, telephone number (if provided), the type of support you are interested in, and the content of your message.
- Client engagement data — information about you and your colleagues that we obtain in the course of providing services, including business contact details and correspondence. Where an engagement involves financial crime or due-diligence support, this may include information needed for that work.
- Technical data — limited information that your browser sends when you visit any website (such as IP address and browser type), used only to serve and secure the site. This website does not use analytics or tracking cookies. See our Cookie Policy.
- Correspondence — records of our communications with you by email, telephone or other means.
We do not seek to collect special category data through this website. Please do not submit it via the contact form.
4. How we collect it
We collect personal data directly from you (when you complete the enquiry form, email or call us, or during an engagement) and from the firm you represent. We may also obtain business contact information from public sources such as LinkedIn or a firm’s website. This website does not use analytics.
5. Why we use it, and our lawful bases
We process personal data for the following purposes and on the following lawful bases under Article 6 UK GDPR:
- To respond to your enquiry — on the basis of your consent and/or our taking steps at your request prior to entering a contract.
- To provide our services and manage engagements — for the performance of a contract with you or your firm, and our legitimate interests in running the business.
- To manage our relationship and communicate with you — on the basis of our legitimate interests in maintaining client and professional relationships.
- To meet legal and regulatory obligations — on the basis of compliance with a legal obligation (for example, record-keeping, tax, and anti-money-laundering obligations where applicable).
- To maintain and secure our website — on the basis of our legitimate interests in operating a secure, functioning website (this site does not use analytics or tracking).
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms, and we will provide further detail on request.
6. Marketing
We may send occasional updates about our services or relevant regulatory developments to existing contacts where we are permitted to do so. You can opt out at any time by replying to any message or contacting us. We do not sell personal data or share it for third-party marketing.
7. Who we share it with
We do not sell personal data. We may share it with:
- Service providers (processors) who support our business — including website hosting, contact-form handling, email and IT services — who process personal data only on our instructions and under written agreements containing appropriate data-protection terms.
- Professional advisers such as our own lawyers, accountants or insurers, where necessary;
- Regulators, authorities or law enforcement where we are required to do so by law; and
- A successor in the event of a reorganisation or transfer of our business, subject to appropriate confidentiality.
8. International transfers
We aim to keep personal data within the UK or European Economic Area. Where a service provider processes personal data outside the UK, we ensure an appropriate safeguard is in place — such as UK ‘adequacy’ regulations or the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
9. How long we keep it
We keep personal data only for as long as necessary for the purposes for which it was collected and to meet legal, regulatory and professional requirements. As a general guide, enquiry data that does not lead to an engagement is held for up to 12 months; records relating to an engagement are held for 6 years after the end of the relationship, to meet legal and limitation requirements. After the applicable period, data is securely deleted or anonymised.
10. How we protect it
We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. These include access controls and strong authentication, encrypted devices, reputable and secured cloud and email services, data minimisation, and confidentiality obligations.
11. Your rights
Subject to conditions and exemptions under data protection law, you have the right to:
- be informed about how your data is used (this policy);
- access a copy of your personal data;
- have inaccurate data rectified;
- have your data erased in certain circumstances;
- restrict or object to processing in certain circumstances;
- data portability; and
- withdraw consent at any time where we rely on consent (without affecting prior processing).
To exercise any of these rights, contact info@bishopsgatevector.com. We will respond within the statutory time limit (generally one month).
12. Complaints to the regulator
If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.
13. Cookies
Our use of cookies and similar technologies is described in our Cookie Policy.
14. Changes to this policy
We may update this policy from time to time. The current version and its review date are shown above; material changes will be highlighted on this page.
15. Contact
Questions about this policy or your personal data can be sent to info@bishopsgatevector.com.