Privacy policy.
How Bruntsfield Capital Limited collects and uses personal data, and the rights you have over it — written to reflect the UK GDPR and the Data Protection Act 2018.
- 01Who we are
- 02The data we collect
- 03How we use it, and our lawful basis
- 04Sharing
- 05How long we keep it
- 06Your rights
- 07Changes
Who we are
Bruntsfield Capital Limited is the data controller for the personal data described in this policy. If you have any question about how we handle your data, write to us at privacy@bruntsfield.capital.
The data we collect
We collect only what we need to run the firm and respond to you:
- Contact details you give us — name, role, firm, email address — when you complete a form, subscribe to Briefing, or write to one of our desks.
- Correspondence — the content of messages you send us and our replies.
- Technical data — limited, privacy-respecting analytics about how this website is used, as described in our Cookie policy.
How we use it, and our lawful basis
We process personal data to reply to enquiries and provide the services you ask for (on the basis of taking steps at your request and our legitimate interest in running the firm), to send Briefing where you have subscribed (on the basis of your consent), and to meet legal and regulatory obligations. We do not sell personal data, and we do not use it for automated decision-making.
Sharing
We share personal data only with service providers who help us operate — for example email and hosting providers — under contracts that require them to protect it, and with professional advisers or authorities where the law requires. Any provider outside the UK is used only where an adequate safeguard, such as the UK International Data Transfer Agreement, is in place.
How long we keep it
We keep personal data only as long as needed for the purpose it was collected, and then delete or anonymise it. Subscription data is kept until you unsubscribe; enquiry correspondence is typically kept for up to twenty-four months unless a longer period is required.
Your rights
Under UK data protection law you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on consent, you may withdraw it at any time. To exercise any of these, write to privacy@bruntsfield.capital. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
Changes
We may update this policy from time to time. The date above shows when it was last revised.