Privacy Policy

1. Who we are

Company Defender Advisory Ltd ('we', 'us', 'our') is the data controller for the personal information described in this policy. We are a UK advisory firm providing legal, accounting, forensic and business recovery services from 66 Paul Street, London.

We are registered in England and Wales under company number 17298091, are registered for VAT under number 524301239, and are registered with the Information Commissioner's Office as a data controller under reference ZC224699.

If you have any questions about this policy or how we handle your information, please contact us using the details at the end of this page.

2. Information we collect

We may collect and hold the following categories of information about you:

• Identity and contact details, such as your name, address, email address and telephone number.
• Information you provide through our online forms, including details of your company, your matter, and any documents or images you upload.
• Identity verification and anti-money laundering information where you instruct us.
• Financial information such as bank details, invoice records and payment history.
• Records of correspondence with us by email, telephone, online form or post.
• Technical information such as IP address, browser type, device information and the pages you visit, collected through cookies and analytics.

3. How we use your information

We use your information for the following purposes, each supported by a lawful basis under UK data protection law:

• To respond to your enquiry and provide a quotation - our legitimate interests in responding to business enquiries.
• To provide the services you instruct us to carry out - performance of our contract with you.
• To meet our legal, regulatory, tax, accounting and anti-money laundering obligations - compliance with a legal obligation.
• To operate, secure and improve our website and services - our legitimate interests in running our business effectively.
• To send you marketing communications where you have asked to hear from us - your consent, which you may withdraw at any time.

4. Cookies and analytics

Our website uses cookies and similar technologies to keep the site working correctly and to understand how it is used. You can block or delete cookies through your browser settings, although some parts of the site may not work as intended if you do.

Where consent is required, we ask for it before setting non-essential cookies.

5. Who we share your information with

We do not sell your personal information. We share it only where necessary, and only with:

• Professional advisers instructed on your matter, such as barristers, experts, insolvency practitioners and accountants.
• Regulators, courts and public authorities where we are required or permitted to disclose information, including HMRC and our professional regulator.
• Our service providers, including IT, hosting, email, case management and accounting software providers, who act on our instructions under contract.
• Credit reference, fraud prevention and identity verification agencies where relevant to a matter.

6. Transfers outside the UK

Some of our service providers store data outside the United Kingdom. Where that happens we take steps to ensure your information receives an equivalent level of protection, using UK-approved safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. How long we keep your information

We keep client files for at least six years after the end of our engagement, in line with our professional and legal obligations and the periods during which claims may be brought against us.

Enquiry records that do not become instructed matters are kept for up to two years. Website analytics information is held in aggregated form.

8. Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete information where there is no good reason for us to keep it.
• Ask us to restrict or stop processing your information in certain circumstances.
• Object to processing carried out on the basis of our legitimate interests, including profiling.
• Ask us to transfer information you provided to us to another organisation.
• Withdraw consent at any time where we rely on consent.

9. Security

We use appropriate technical and organisational measures to protect your information, including access controls, encrypted transmission and confidentiality obligations for our staff and contractors. No system is completely secure, and any information you send to us over the internet is sent at your own risk.

10. Marketing

We only send marketing communications to people who have asked to hear from us, and every message includes a way to unsubscribe. Contacting us about a matter does not sign you up to marketing.

11. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The version published on this page is the current version, and the date shown at the top of the page tells you when it last changed.