Privacy & Cookie Policy · Clarendon Advisory

This Privacy Policy explains how Clarendon Office Limited collects, uses, stores and protects personal data obtained through www.clarendonadvisory.com. We are committed to handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Clarendon Office Limited is the data controller in respect of personal data collected via this website.

Contact: info@clarendonadvisory.com · Churchill House, 137-139 Brent Street, London, United Kingdom, NW4 4DJ

If you have any questions about how we handle your personal data, please contact us at the above address. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

2. What Data We Collect

We may collect the following categories of personal data:

Contact information: name, email address, telephone number — collected when provided voluntarily via our contact form or direct email;
Technical data: IP address, browser type and version, operating system, referring URLs, pages visited and time spent — recorded automatically at server level by our hosting provider;
Communications: the content of any message or enquiry you send to us.

We do not collect sensitive personal data (as defined under UK GDPR Article 9) through this website.

3. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR Article 6:

Legitimate interests (Article 6(1)(f)): to respond to enquiries, maintain website security, and improve our services, where such interests are not overridden by your rights;
Legal obligation (Article 6(1)(c)): where required by applicable law.

We do not currently process any personal data on the basis of consent, as we do not use non-essential cookies or marketing tools. Should this change, this Policy will be updated accordingly.

4. How We Use Your Data

We use personal data to:

Respond to enquiries and requests submitted to us via the contact form or by email;
Maintain the security and performance of this website;
Comply with applicable legal obligations.

We do not sell, rent, or transfer your personal data to third parties for marketing purposes. We do not use your data for automated decision-making or profiling.

5. Data Sharing

We share personal data only with the following categories of recipients:

Google Workspace (Google LLC): our email service provider, which processes inbound and outbound email communications on our behalf as a data processor subject to Google's Data Processing Addendum;
Namecheap, Inc.: our domain registrar and web hosting provider, which processes domain-level and server-level technical data in its capacity as both an independent data controller and infrastructure provider, subject to their own privacy policy at namecheap.com/legal/general/privacy-policy;
Legal, regulatory or law enforcement authorities: where required by applicable law.

All third-party processors are subject to contractual obligations consistent with UK GDPR Article 28 requirements.

6. International Transfers

Google LLC is a US-based provider. Data processed via Google Workspace may be transferred outside the UK. Such transfers are carried out on the basis of Google's standard contractual clauses approved for use under UK GDPR, as supplemented by the UK Addendum issued by the ICO. Namecheap, Inc. is also US-based; transfers are made subject to their standard contractual clauses and privacy policy.

7. Data Retention

We retain personal data only for as long as necessary:

Enquiry and correspondence data: retained for up to 3 years from the date of last contact, unless a client relationship arises in which case longer retention may apply;
Server-level technical logs: retained by Namecheap in accordance with their own retention policy;
Legal obligation data: retained as required by applicable law.

8. Your Rights

Under UK GDPR, you have the following rights:

Right of access (Article 15): to request a copy of personal data we hold about you;
Right to rectification (Article 16): to require correction of inaccurate data;
Right to erasure (Article 17): to request deletion of your data in certain circumstances;
Right to restriction of processing (Article 18): to restrict how we use your data in certain circumstances;
Right to data portability (Article 20): to receive your data in a structured, commonly used and machine-readable format;
Right to object (Article 21): to object to processing based on legitimate interests;
Right to withdraw consent: at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@clarendonadvisory.com. We will respond within one calendar month. You also have the right to lodge a complaint with the ICO at ico.org.uk.

9. Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no transmission of data over the internet is completely secure and we cannot guarantee the absolute security of data transmitted to our website.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in law or our practices. The date of last revision is stated at the top of this document. Continued use of this website after any update constitutes acknowledgment of the revised Policy.

Cookie Policy

This Cookie Policy explains how we use cookies and similar technologies on this website and should be read alongside our Privacy Policy above.

1. What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to recognise your device and store certain information about your visit.

2. Cookies We Use

Strictly Necessary Cookies. This website may use strictly necessary cookies to enable core functionality. These cannot be disabled as the website would not function properly without them. They do not collect personal data for marketing purposes.

We do not currently use analytics, advertising, targeting or functional cookies.

3. Third-Party Technical Processing

Server Logs — Namecheap (Domain Registrar and Web Host). Namecheap, Inc., our domain registrar and web hosting provider, automatically records server-level access log data — including visitor IP addresses, request timestamps and page URLs — for security and infrastructure purposes. This processing is carried out by Namecheap as an independent data controller under their own privacy policy at namecheap.com/legal/general/privacy-policy. We do not access or use this data for marketing or profiling.

Email — Google Workspace (Google LLC). Email communications sent to or from info@clarendonadvisory.com are processed via Google Workspace (Google LLC) as our email service provider. Google processes this data as a data processor on our behalf under Google's Data Processing Addendum and standard contractual clauses for international transfers. See policies.google.com/privacy for details.

4. Managing Cookies

You can control or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of this website. For guidance on managing cookies, visit aboutcookies.org or allaboutcookies.org.

As we do not currently place any non-essential cookies, no cookie consent banner is required at this time. Should we introduce non-essential cookies in future, we will implement a compliant consent mechanism in accordance with UK PECR and UK GDPR before doing so.

5. Changes to This Policy

We may update this Cookie Policy periodically. Material changes will be notified by updating the date at the top of this document.