Privacy Policy
How we handle personal data under UK GDPR and the Data Protection Act 2018.
Last updated: 6 July 2026
RAI Consultancy Ltd ("we", "us") is the data controller for personal data processed in connection with our consultancy services. This notice explains what we collect, why, how long we keep it and the rights you have.
1. Who we are
RAI Consultancy Ltd, registered in England & Wales. Company number 17313526. ICO registration number [TO CONFIRM]. Registered office [TO CONFIRM].
2. Personal data we process
- Identity and contact details you provide when enquiring or instructing us.
- Information about the matter you instruct us on, which may include personal data of third parties.
- Correspondence, meeting notes and records generated during an engagement.
- Technical data (IP address, browser type) from visits to this website.
3. Lawful basis
We rely on (a) performance of a contract for instructions and engagements, (b) legitimate interests for responding to enquiries and administering our business, and (c) legal obligation for records we are required to retain. Where we handle special-category data during an investigation, we rely on the additional conditions in Schedule 1 of the Data Protection Act 2018 relating to safeguarding, legal claims and substantial public interest.
4. Confidentiality
All engagement material is treated as confidential and, where instructed via counsel, as legally privileged. We do not share client information with third parties except where required by law or with your written instruction.
5. Retention
Engagement files are retained for [TO CONFIRM — typically 6–7 years] following the closure of a matter, to meet professional, insurance and regulatory requirements. Enquiry correspondence that does not lead to instruction is deleted within 12 months.
6. International transfers
We do not routinely transfer personal data outside the UK. Where a specific engagement requires it, we use appropriate safeguards under UK GDPR.
7. Your rights
You have the right to access, rectify, erase, restrict or object to our processing of your personal data, and to data portability where applicable. To exercise these rights, email enquiries@raiconsultancy.co.uk. You may complain to the Information Commissioner's Office (ico.org.uk) but we would ask you to raise concerns with us first.
8. Changes
We may update this notice from time to time. Material changes will be published on this page with a revised effective date.
