Privacy Policy

Ascot Advisory Group
Company Number: 16625333
Registered in London, United Kingdom
Effective Date: 2025

Ascot Advisory Group (“Ascot Advisory”, “we”, “our”, “us”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other applicable UK privacy legislation. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you visit our website, engage with our services, or interact with us.

1. Who We Are

Ascot Advisory Group is a UK‑registered company providing intelligence, investigations, due diligence, and advisory services within the investment migration and related sectors.

Registered Address: London, United Kingdom
Company Number: 16625333

We act as a Data Controller for the personal data we collect.

2. Data We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide to Us

Name, email address, phone number
Company name, job title, and other professional information
Identification documents (e.g., passport copies) when required for due diligence or onboarding
Information submitted through our website contact forms or email
Any information you provide during consultation or service engagement

2.2 Information We Collect Automatically

IP address
Browser type and version
Device information
Website usage data (pages visited, time spent, clicks)
Cookies and tracking technologies (see Section 9)

2.3 Information from Third Parties

We may receive information from: - Public records and databases (e.g., corporate registries) - Government authorities where appropriate - Third‑party service providers and partners - Sanctions, PEP, and adverse media databases

3. Legal Bases for Processing

Under UK GDPR, we rely on one or more of the following legal bases: - Contractual Necessity – To provide our services and fulfil contractual obligations. - Legal Obligation – To comply with regulated due diligence, AML/CFT, or record‑keeping duties. - Legitimate Interests – For business operations, service improvement, fraud prevention, and security. - Consent – Where required (e.g., certain marketing activities or cookies).

4. How We Use Your Data

We use your personal data to: - Provide advisory, due diligence, and investigative services - Assess client eligibility and risk (including KYC/AML requirements) - Respond to inquiries or provide requested information - Manage client relationships and billing - Conduct internal research and service improvement - Ensure website functionality and security - Send marketing communications (with your consent)

5. Data Sharing and Transfers

We may share personal data with the following parties: - Authorised agents and partners involved in investment migration processes - Government authorities, where legally required - External due diligence, background screening, or analytics providers - Professional advisers (legal, compliance, accounting) - Cloud service providers and IT infrastructure partners

We ensure that all third‑party processors comply with UK GDPR and implement appropriate security measures.

International Data Transfers

If we transfer personal data outside the UK, such transfers will occur only where appropriate safeguards are in place, such as: - UK Addendum to the EU Standard Contractual Clauses (SCCs) - Adequacy regulations issued by the UK government

6. Data Retention

We retain personal data only as long as necessary for: - Providing our services - Meeting legal, regulatory, and compliance obligations (e.g., AML requirements) - Defending potential legal claims

Typically, due diligence and onboarding records are retained for 5–7 years, depending on legal requirements.

7. Your Rights Under UK GDPR

You have the following rights: - Right to Access – Obtain a copy of your personal data. - Right to Rectification – Correct inaccurate or incomplete data. - Right to Erasure – Request deletion where legally permissible. - Right to Restrict Processing – Limit the use of your data. - Right to Object – Object to processing based on legitimate interests or direct marketing. - Right to Data Portability – Request transfer of your data to another service provider. - Right to Withdraw Consent – When processing is based on consent.

To exercise these rights, contact us at: privacy@ascotadvisory.com.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data from: - Loss - Misuse - Unauthorised access - Alteration - Disclosure

These measures include encryption, access controls, secure servers, and regular security reviews.

9. Cookies and Tracking Technologies

We use cookies to: - Ensure website performance - Analyse user activity - Improve site functionality - Enable certain features

You may adjust your cookie preferences through your browser settings. For more information, see our Cookie Policy.

10. Children’s Data

Our website and services are not intended for children under the age of 16. We do not knowingly collect data relating to minors without proper legal basis and parental consent where required.

11. Automated Decision‑Making

We do not engage in automated decision‑making or profiling that produces legal or similarly significant effects.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. All changes will be posted on this page with an updated Effective Date.

13. How to Contact Us

If you have any questions about this Privacy Policy or how your data is processed, contact us at:

Ascot Advisory Group
London, United Kingdom
Email: info@ascotadvisory.co.uk

14. Right to Complain

If you believe your data protection rights have been violated, you may lodge a complaint with the UK’s supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk/

Last updated: 2025