RAI Consultancy Ltd · UK-wideEmail
RAI Consultancy
Legal

Privacy Policy

How we handle personal data under UK GDPR and the Data Protection Act 2018.

Last updated: 6 July 2026

RAI Consultancy Ltd ("we", "us") is the data controller for personal data processed in connection with our consultancy services. This notice explains what we collect, why, how long we keep it and the rights you have.

1. Who we are

RAI Consultancy Ltd, registered in England & Wales. Company number 17313526. ICO registration number [TO CONFIRM]. Registered office [TO CONFIRM].

2. Personal data we process

  • Identity and contact details you provide when enquiring or instructing us.
  • Information about the matter you instruct us on, which may include personal data of third parties.
  • Correspondence, meeting notes and records generated during an engagement.
  • Technical data (IP address, browser type) from visits to this website.

3. Lawful basis

We rely on (a) performance of a contract for instructions and engagements, (b) legitimate interests for responding to enquiries and administering our business, and (c) legal obligation for records we are required to retain. Where we handle special-category data during an investigation, we rely on the additional conditions in Schedule 1 of the Data Protection Act 2018 relating to safeguarding, legal claims and substantial public interest.

4. Confidentiality

All engagement material is treated as confidential and, where instructed via counsel, as legally privileged. We do not share client information with third parties except where required by law or with your written instruction.

5. Retention

Engagement files are retained for [TO CONFIRM — typically 6–7 years] following the closure of a matter, to meet professional, insurance and regulatory requirements. Enquiry correspondence that does not lead to instruction is deleted within 12 months.

6. International transfers

We do not routinely transfer personal data outside the UK. Where a specific engagement requires it, we use appropriate safeguards under UK GDPR.

7. Your rights

You have the right to access, rectify, erase, restrict or object to our processing of your personal data, and to data portability where applicable. To exercise these rights, email enquiries@raiconsultancy.co.uk. You may complain to the Information Commissioner's Office (ico.org.uk) but we would ask you to raise concerns with us first.

8. Changes

We may update this notice from time to time. Material changes will be published on this page with a revised effective date.