Privacy Policy

Data Controller

For Data Control queeries please contact
Julian Fellows, Executive Director
Compliance@Sevenstone.UK

Sevenstone Privacy Policy

Last updated: 1 June 2026

This Privacy Policy explains how Sevenstone Advisory Ltd (“Sevenstone”, “we”, “us” or “our”) collects, uses and protects personal data when you visit our website, contact us, or otherwise interact with us in connection with our services. We are committed to handling personal data lawfully, fairly and transparently in accordance with UK data protection law.

1. Who we are

Data controller: Sevenstone Advisory Ltd
2 Manor Farm Walk, Portesham, Dorset, DT3 4PH
Email: compliance@sevenstone.co.uk
Website: www.sevenstone.co.uk

If you have any questions about this Privacy Policy or how we use your personal data, please contact us using the details above.

2. The personal data we collect

Depending on how you interact with us, we may collect and use the following personal data:

Information you provide directly

your name;
business email address;
telephone number;
job title;
organisation name;
information you include in an enquiry, message or meeting request;
any information you provide when discussing a potential engagement with us; and
if you send us a CV or profile, information about your professional background and experience.

Information we collect automatically

When you use our website, we may automatically collect certain technical information such as:

IP address;
browser type and version;
device type;
pages visited;
date and time of visits; and
referring website or source.

At the date of this Privacy Policy, Sevenstone does not use cookies or similar tracking technologies on its website. If this changes, we will update this Privacy Policy and, where required, provide an appropriate cookie notice or consent mechanism.

3. How we use your personal data

A. To respond to enquiries and manage introductions

We use your contact details and the information you send us to respond to your enquiry, arrange calls or meetings, provide information about our services, and keep a record of our communications.

Lawful basis: legitimate interests (to operate and grow our business, manage enquiries and respond to potential clients and partners) and, where relevant, steps taken at your request before entering into a contract.

B. To provide and manage our services

Where we are engaged to provide services, we use relevant contact and business information to prepare proposals and statements of work, deliver services, manage the client relationship, administer billing and payments, and comply with our contractual obligations.

Lawful basis: contract, and in some cases legitimate interests (to manage the relationship and administer the engagement).

C. To operate, secure and improve our website

We use technical and usage information to keep our website secure, diagnose faults and prevent misuse, understand how our website is used, and improve website performance and content.

Lawful basis: legitimate interests (website security, service improvement and business administration).

D. To send relevant business communications

If you contact us, meet us, or there is another lawful basis to do so, we may send you limited business communications about Sevenstone’s services, insights or updates where permitted by law.

Lawful basis: legitimate interests (business development and maintaining professional relationships), or consent where consent is required.

You can opt out of non-essential marketing communications at any time by using the unsubscribe link in the email or by contacting us.

E. To comply with legal and regulatory obligations

We may process personal data where necessary to comply with legal, tax, accounting or regulatory obligations, establish, exercise or defend legal claims, or keep appropriate business records.

Lawful basis: legal obligation, and where relevant legitimate interests.

F. Recruitment and contractor enquiries

If you send us a CV, biography or contractor profile, we may use your information to assess suitability for current or future opportunities.

Lawful basis: legitimate interests (recruitment and resourcing) and, where applicable, steps taken at your request before entering into a contract.

4. Who we share personal data with

We do not sell personal data.

We may share personal data, where necessary, with the following categories of recipients:

our IT and website service providers;
website hosting providers;
professional advisers such as lawyers, accountants and insurers;
payment, invoicing or bookkeeping providers;
cloud storage and communications providers; and
courts, regulators, law enforcement or other authorities where required by law.

We only share personal data where there is a lawful basis for doing so and where appropriate safeguards are in place.

5. International transfers

Sevenstone is a UK-based business and we aim to keep personal data processing within the UK where practical. However, some of our service providers may store or process personal data outside the UK. Where this happens, we will ensure that appropriate safeguards are in place, such as a UK adequacy decision or appropriate contractual safeguards approved for use under UK data protection law.

You can contact us if you would like more information about any such safeguards.

6. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes set out in this Privacy Policy, including to satisfy legal, accounting or reporting requirements.

Typical retention periods are:

general enquiries: up to 24 months after our last meaningful contact;
client and supplier records: for the duration of the relationship and typically up to 7 years afterwards for contractual, tax and accounting purposes;
CVs / contractor profiles (if unsolicited or speculative): up to 24 months unless we agree otherwise; and
basic website logs: only for as long as reasonably necessary for security, troubleshooting and administration.

We may keep information for longer where necessary to establish, exercise or defend legal claims, or where the law requires us to do so.

7. Your rights

Under UK data protection law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request erasure of your personal data in certain circumstances;
request restriction of processing in certain circumstances;
object to processing carried out on the basis of legitimate interests;
object at any time to direct marketing; and
request transfer of your personal data in a structured, commonly used, machine-readable format, where applicable.

Where we rely on consent, you also have the right to withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew consent.

To exercise any of these rights, please contact us at privacy@sevenstone.co.uk .

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we use your personal data:

Information Commissioner’s Office
Website: https://ico.org.uk
Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns first.

8. Direct marketing

If we send you marketing by email or similar electronic means, we will do so in accordance with applicable law.

You can opt out of marketing at any time by:

clicking the unsubscribe link in any marketing email; or

emailing us at privacy@sevenstone.co.uk .

We may still send service-related or relationship-related communications where these are necessary and are not marketing communications.

9. Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children

Our website and services are intended for business audiences and are not directed at children. We do not knowingly collect personal data from children through our website.

11. Third-party websites

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party websites. We encourage you to read their privacy notices before providing any personal data.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website functionality or legal requirements. The latest version will always be posted on this page and the “Last updated” date will be revised.

13. Contact

Sevenstone Advisory Ltd
2 Manor Farm Walk, Portesham, Dorset, DT3 4PH
Email: compliance@sevenstone.co.uk