Privacy Protocol

How we collect, use, and protect your personal information

Last updated: 11/07/2025

1. Introduction

Rosenburg Advisory ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Protocol explains how we collect, use, disclose, and safeguard your personal information when you visit our website, engage our legal services, or otherwise interact with us.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a legal advisory firm, we maintain the highest standards of confidentiality and data protection.

2. Data Controller

Rosenburg Advisory
5th Floor, 167-169 Great Portland Street
London W1W 5PF
United Kingdom

Email: contact@rosenburgadvisory.com
Phone: +44 20 7794 0644

3. Information We Collect

3.1 Personal Information You Provide

  • Contact details (name, email address, telephone number, postal address)
  • Professional information (company name, position, industry)
  • Legal matter details and communications
  • Financial information for billing and payment processing
  • Identity verification documents when required
  • Any other information you choose to provide when contacting us

3.2 Information Collected Automatically

  • Website usage data (pages visited, time spent, browser type)
  • IP address and device information
  • Cookies and similar tracking technologies
  • Communication metadata (date, time, method of communication)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Legitimate Interests: To provide legal services and maintain client relationships
  • Contract Performance: To fulfill our obligations under retainer agreements
  • Legal Obligation: To comply with professional regulatory requirements
  • Consent: For marketing communications and website analytics (where applicable)
  • Vital Interests: In exceptional circumstances to protect life or prevent serious harm

5. How We Use Your Information

  • Providing legal advisory services and responding to inquiries
  • Managing client relationships and communications
  • Processing payments and maintaining financial records
  • Complying with professional and regulatory obligations
  • Improving our services and website functionality
  • Sending relevant legal updates (with your consent)
  • Protecting our rights and preventing fraud

6. Information Sharing and Disclosure

We maintain strict confidentiality and do not sell your personal information. We may share information in limited circumstances:

  • With your consent: When you have explicitly authorized disclosure
  • Professional collaborators: Barristers, expert witnesses, or co-counsel (under confidentiality)
  • Service providers: IT support, payment processors, and other vendors (under data processing agreements)
  • Legal obligations: When required by court order, regulatory authority, or legal process
  • Business transfers: In the event of merger, acquisition, or sale (subject to confidentiality protections)

7. International Transfers

We primarily process data within the UK. Any international transfers are conducted under appropriate safeguards, including adequacy decisions, Standard Contractual Clauses, or other approved mechanisms under UK GDPR.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy:

  • Client files: Minimum 7 years after matter completion (professional requirement)
  • Financial records: 7 years (regulatory requirement)
  • Marketing data: Until consent is withdrawn
  • Website data: As specified in our cookie policy

9. Your Rights

Under UK GDPR, you have the following rights:

  • Access: Request copies of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion (subject to legal and professional obligations)
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a structured format
  • Objection: Object to processing based on legitimate interests
  • Automated decision-making: Rights regarding automated profiling

To exercise these rights, contact us at contact@rosenburgadvisory.com. Please note that professional privilege and regulatory obligations may limit some rights.

10. Security Measures

We implement robust security measures to protect your personal information:

  • Encrypted data transmission and storage
  • Access controls and authentication systems
  • Regular security assessments and updates
  • Staff training on data protection and confidentiality
  • Incident response procedures
  • Physical security measures for our premises

11. Cookies and Website Technologies

Our website uses essential cookies for functionality and may use analytics cookies to improve user experience. You can manage cookie preferences through your browser settings. Some features may not function without essential cookies.

12. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of external sites. We encourage you to review their privacy policies before providing personal information.

13. Changes to This Policy

We may update this Privacy Protocol to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or direct notification to clients.

14. Contact and Complaints

For privacy-related questions or to exercise your rights:

Email: contact@rosenburgadvisory.com
Phone: +44 20 7794 0644
Post: Data Protection Officer, Rosenburg Advisory, 5th Floor, 167-169 Great Portland Street, London W1W 5PF

If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

This Privacy Protocol was last updated on 11/07/2025 and is governed by UK law.