Privacy Policy

1. Introduction

Inverlock (“we”, “our”, or “us”) is committed to protecting the privacy of individuals who visit our website at inverlockadvisory.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is Inverlock. If you have any questions about this Privacy Policy or our data practices, please contact us at info@inverlockadvisory.com.

3. Information We Collect

We may collect the following categories of personal data when you interact with our website:

• Contact information: name and email address when you contact us via email.
• Publication requests: your name, email address and, optionally, your company when you download a paper from our Insights section or request the underlying dataset. These forms are processed on our behalf by Web3Forms, which delivers the submission to us by email.
• Technical data: IP address, browser type and version, device information, and pages visited, collected automatically through server logs.
• Usage data: information about how you use our website, including your disclaimer acceptance preference stored locally on your device.

4. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide our advisory services.
• To send you the publication or dataset you requested, and where relevant to follow up once about it. We do not add you to a marketing list without your consent, and we do not share your details with third parties.
• To understand how our website is used, in aggregate and without identifying individual visitors.
• To operate and maintain our website.
• To comply with legal and regulatory obligations.
• To protect our legitimate business interests, including fraud prevention and security.

5. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests: operating our website and responding to enquiries.
• Consent: where you have provided explicit consent for specific processing activities.
• Legal obligation: where processing is necessary to comply with applicable laws and regulations.

6. Data Sharing and Transfers

We do not sell your personal data. We may share your data with trusted service providers who assist in operating our website and conducting our business, subject to appropriate data processing agreements. Any international transfers of data will be subject to appropriate safeguards as required by UK GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Contact enquiry data is retained for a maximum of two years unless a longer retention period is required by law.

8. Your Rights

Under UK GDPR, you have the right to access, rectify, erase, or restrict the processing of your personal data, as well as the right to data portability and the right to object to processing. To exercise any of these rights, please contact us at info@inverlockadvisory.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been processed unlawfully.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.