Privacy Notice
Discretion is central to what we do, and that includes how we handle your personal information. This notice explains what we collect through this website, why, who sees it, how long we keep it and what your rights are under UK data protection law.
1. Who we are
This website is operated by Greyveil Ltd, a company registered in England and Wales (company no. 17228832), registered office 128 City Road, London EC1V 2NX, United Kingdom. Greyveil Ltd is the controller of the personal data described in this notice.
For any question about your personal data, or to exercise your rights, contact Daniel Goodbody, Founder and Managing Director, at daniel@grey-veil.com, or write to the registered office above.
ICO registration number: ZC226333
2. What we collect
When you send an enquiry through our form
- The service you are interested in, the timeframe and the location;
- Your name, role, email address and/or phone number, and how you prefer to be contacted;
- Anything you choose to write in the message box.
Please do not include the names of the people you would like protected, health information or other sensitive details in the form. We discuss specifics in person, once a confidential conversation is under way.
When you call or email us
Your phone number or email address and what you tell us. If our senior directors are unavailable to speak directly, calls may be recorded as a message and forwarded to them.
When you browse this website
Through optional cookies: information about your visit, such as pages viewed, device and browser type, approximate location derived from your IP address, and the advertisement that brought you here. See section 9 and our Cookie Policy.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR, Article 6) |
|---|---|
| Responding to your enquiry and preparing a proposal | Steps taken at your request before entering into a contract (6(1)(b)); our legitimate interest in answering enquiries (6(1)(f)) |
| Keeping a record of enquiries and our correspondence | Legitimate interests (6(1)(f)) |
| Measuring which advertising brings enquiries, and improving it, including matching a hashed version of your email and phone to our Google advertisements | Your consent, given through the cookie banner (6(1)(a) and PECR) |
| Complying with legal and regulatory obligations | Legal obligation (6(1)(c)) |
We do not sell your personal data, and we do not use it for automated decision-making or profiling that affects you.
4. Who we share it with
Your information is held strictly on a need-to-know basis within Greyveil. We share it only with:
- Our website and digital marketing provider, which builds, hosts and maintains this website and our advertising on our instructions. Enquiries are forwarded to us by email as soon as they are sent; the copy held on the website's hosting platform is deleted promptly, within 7 days.
- Hosting and technology providers that run this website and our email: Netlify, Inc. (United States) and 20i Ltd (Stackmail email hosting, United Kingdom).
- Google (Google Ads, Google Analytics, Google Tag Manager), through optional cookies. If you accept them, when you send an enquiry, your email address and phone number are first converted in your browser into a scrambled code (SHA-256 hash) that Google cannot read, and only that code is shared with Google, so it can confirm that the enquiry came from one of our advertisements ("enhanced conversions"). Google uses it for this measurement only and does not receive your details in readable form.
- Partner organisations that deliver part of a mandate outside the United Kingdom, on a case-by-case basis, only once you have engaged us and only where necessary for that mandate, under a non-disclosure agreement and signed terms of agreement.
- Professional advisers, regulators, law enforcement or courts, where the law requires it.
Each provider acts under a written contract that requires it to protect your data and use it only on our instructions.
5. International transfers
Some of our providers process data outside the United Kingdom, in the European Economic Area or the United States. Where a mandate requires it, partner organisations in other countries may also receive the details needed for that mandate. Where this happens, we rely on UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum, so that your data remains protected to UK standards.
6. How long we keep it
- Copy of your enquiry on the website platform: deleted within 7 days of being forwarded to us.
- Enquiries that do not lead to an engagement: 12 months from our last contact, then deleted.
- Clients: for the duration of the engagement and up to 6 years afterwards, for legal, tax and insurance purposes.
- Website analytics: up to 14 months, under our Google Analytics settings.
7. How we protect it
This website uses an encrypted (HTTPS) connection. Access to enquiries is limited to Greyveil's senior directors. We hold no public client roster, and we never publish a client's identity, location or details without written consent.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, or its use restricted;
- object to our use of your data based on legitimate interests;
- receive your data in a portable format;
- withdraw your consent at any time, for example by changing your cookie choice.
- complain to the Information Commissioner's Office (ICO), the UK data protection regulator.
To exercise any of these rights, email daniel@grey-veil.com. We will respond within one month. There is normally no fee.
9. Cookies
Optional cookies are used to measure which advertising brings enquiries. You can reject them at any time in our cookie banner. The cookies we use, and how to change your choice at any time, are explained in our Cookie Policy.
10. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.