Privacy Policy

Who we are

Stonehaven Investments Ltd (‘we’, ‘us’) is a research and planning consultancy for private investors, registered in England and Wales, with our office at 4th Floor, 12 Fenchurch Avenue, London EC3M 5PB, United Kingdom. We are the controller of personal data processed through this website and in the course of our client work. Questions about this policy, or about your data, can be sent to enquiries@stonehaveninvestments.uk.

What we collect

Enquiry form data: the name, email address, phone number (if provided) and message you submit when requesting an introduction or a quote. Client engagement data: information you choose to share with us in the course of an engagement – your financial position, goals and documents – processed under a contract with you. Technical data: standard server logs (IP address, browser type, pages visited) retained briefly for security and performance monitoring. We do not use advertising trackers and we do not sell personal data to anyone.

Why we process it, and our lawful bases

We process enquiry data to respond to your request (legitimate interests / steps toward a contract), engagement data to deliver the work you have engaged us for (contract), technical data to keep the site secure (legitimate interests), and records we must keep for tax and professional-indemnity purposes (legal obligation). Where we rely on your consent – for example, if you ask to receive our client notes – you may withdraw it at any time.

Where data lives, and for how long

Personal data is stored on encrypted systems hosted in the United Kingdom, accessible only to the consultants working on your matter. Enquiry correspondence is retained for up to 24 months. Client files are retained for seven years after the end of an engagement, to meet insurance and tax record requirements, then securely destroyed. You may request earlier erasure where no legal obligation requires us to retain the data.

Sharing

We do not sell or rent personal data. We share it only with: service providers who process data on our instructions (secure hosting, email, accounting) under written data-processing agreements; and professional advisers where strictly necessary (for example, our indemnity insurers). Any processing outside the UK would be protected by an adequacy regulation or equivalent safeguards; currently, none of our providers process UK client data outside the UK.

Your rights

Under UK GDPR you have the right to: access a copy of your personal data; correct inaccurate data; have data erased where we have no overriding obligation to keep it; restrict or object to processing based on legitimate interests; receive your data in a portable format where processing is based on contract or consent; and complain to the Information Commissioner’s Office at ico.org.uk if you believe we have mishandled your data. We respond to all rights requests within one month.

Cookies

This website uses a strictly necessary cookie to remember your cookie preference, and privacy-friendly aggregate analytics to count page visits without identifying individuals. No advertising or cross-site tracking cookies are set. You can change or withdraw your cookie choice at any time from the footer link.