Privacy Policy
Who we are
Quillon Advisory LTD is a regulatory consultancy for financial services firms. We are the data controller for the personal information described in this policy.
Company number: 17445771, registered in England and Wales
Registered office: 71-75, Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Registered with the Information Commissioner's Office, registration number (ICO NUMBER PENDING)
This policy explains what personal information we collect through our website and in the course of our business, why we hold it, and what you can ask us to do about it.
What we collect
If you contact us or use a form on this site, we collect your name, email address, telephone number if you give one, the organisation you work for, and whatever you choose to tell us in your message.
If you are a client contact or a prospective client contact, we hold your name, job title, business contact details, and a record of our correspondence and dealings with you.
If we act for you or your firm, we hold the information necessary to deliver the work. Where an engagement requires us to make submissions to a regulator, this can extend to identity details such as date of birth and home address.
If you apply to work with us, we hold the information in your application and any correspondence about it.
When you visit this website, our hosting provider records standard technical information including IP address, browser type, pages viewed and referring site. See the cookies section below.
We do not seek special category data (information about health, race, religion, sexual orientation, political opinion, trade union membership, genetics or biometrics) about the people we correspond with. Where an engagement involves records that contain such information, we handle it under the terms of our client engagement rather than this policy.
Where we get it
Usually directly from you, when you contact us, engage us, or correspond with us. We may also receive your information from a client or another organisation that has instructed us, or from publicly available sources such as company records, regulatory registers and professional networking sites.
Why we are allowed to hold it
We rely on one of four lawful bases.
Contract — where we need the information to provide services you or your firm have engaged us for, or to take steps before entering an agreement.
Legitimate interests — to run and develop the business: responding to enquiries, maintaining client relationships, keeping records of our work, and contacting business professionals about services relevant to their role. We have considered whether this is fair to you, and you can object at any time using the details below.
Legal obligation — where we must keep or disclose information to meet accounting, tax, regulatory or other legal requirements.
Consent — for marketing emails you have asked to receive. You can withdraw consent at any time, and every email contains an unsubscribe link.
What we do with it
We use personal information to respond to enquiries, deliver and administer our services, manage our relationship with clients and contacts, meet our legal and regulatory obligations, maintain business records, consider job applications, and, where the basis above allows, tell people about our work.
We do not sell, rent or trade personal information, and we do not use it for automated decision-making or profiling.
Who we share it with
We share personal information only where there is a reason to.
Service providers who support the business, including our website host, email and document storage provider, accounting software provider and IT support. Each is bound by contract to protect the information and to process it only on our instructions.
Professional advisers such as our accountants, insurers and lawyers.
Regulators, law enforcement and courts, where we are required or permitted by law to disclose.
A buyer, if the business or its assets are sold or transferred.
Where an engagement requires us to share information with a client's other advisers or with a regulator, we agree that at the outset of the work.
Where it is held
Our systems are provided by Google Workspace, Microsoft 365, and Squarespace. Some of these operate infrastructure outside the United Kingdom. Where personal information is transferred outside the UK, we rely on the safeguards permitted under UK data protection law, including adequacy regulations and standard contractual clauses.
How long we keep it
We keep personal information only as long as we need it.
Website enquiries that do not lead to a relationship: 12 months
Client and engagement records: seven years after the end of the relationship, to meet legal, tax, regulatory, insurance and professional obligations
Unsuccessful job applications:six months
Marketing contacts: until you unsubscribe or ask us to remove you
Where we no longer need information, we delete it or anonymise it.
Keeping it secure
We use access controls, encryption in transit, reputable providers and a small number of devices, and we restrict access to the information to those who need it. We have a process for identifying and responding to personal data breaches, and will notify you and the ICO where the law requires it.
No transmission over the internet is completely secure, and information sent to us over the internet is sent at your own risk.
Your rights
Under UK data protection law you can ask us to:
give you a copy of the personal information we hold about you
correct information that is wrong or incomplete
delete information, where we no longer have a reason to hold it
restrict how we use it while a query is resolved
transfer information you gave us to another organisation, in a machine-readable format
stop using it for direct marketing, at any time
stop relying on legitimate interests, where you object and we have no overriding reason to continue
To exercise any of these, email mattbrowne01@gmail.com. We will respond within one month. There is no charge, though we may ask you to confirm your identity first.
If you are unhappy with how we have handled your information, please tell us so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.
Cookies
This website uses essential cookies to function, and analytics cookies to understand how the site is used. Analytics cookies are only set if you accept them. You can change your choice at any time through the cookie banner / your browser settings. Details of the individual cookies we use are set out in our Cookie Policy.
You can block or delete cookies through your browser settings, though parts of the site may not work properly if you block essential ones.
Links to other sites
This site links to other websites. This policy covers only our site, and we are not responsible for how other organisations handle your information.
Changes to this policy
We update this policy when our practices change. The date at the top shows when it was last revised, and the current version is always the one on this page.
Contact
Quillon Advisory LTD, 71-75, Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ