Privacy Policy
This Privacy Policy explains how Softgrovepath Ltd collects, uses, discloses, and retains personal data for clients, prospective clients, subscribers and visitors to our website. We are committed to handling data lawfully, transparently and with respect for individuals' privacy. This document describes categories of data we process, the lawful bases we rely on, how long we retain information, and the rights available to individuals. Where we process personal data on behalf of a client as a data processor, our contractual terms reflect the instructions and safeguards agreed with that client. For direct enquiries about this policy or to exercise a data subject right, use the contact details below. We review this policy periodically and will publish any updates here with an updated effective date.
Information we collect
We collect information you provide directly, such as name, business email, telephone number, organisation name and any details included in messages or uploaded materials when you contact us or request services. We may also collect communications metadata and records of interactions, such as dates and subjects of meetings. When you subscribe to insights, we store your email address for distribution. When you visit our website we automatically collect limited technical data via server logs and cookies, including IP address, browser type, device identifiers and pages visited to support site functionality and analytics. Where processing is necessary for legitimate business purposes, contractual obligations or with consent, we ensure appropriate protections are in place. We do not sell personal data to third parties.
How we use your data
We use personal data to respond to enquiries, propose and deliver advisory engagements, administer subscriptions and communicate updates relevant to governance and financial oversight. Usage includes preparing proposals, scheduling meetings, delivering reports and fulfilling contractual obligations. We also use aggregated technical data to improve website performance and user experience. Where we send marketing communications, we rely on consent or legitimate interest and provide straightforward unsubscribe options. For any processing that requires transfer outside the United Kingdom or European Economic Area, we rely on appropriate safeguards, such as standard contractual clauses, or where permitted, transfers based on adequacy decisions. We retain information only for as long as necessary to fulfil the purposes outlined and to meet legal or regulatory obligations.
Cookies and analytics
Our site uses essential cookies required for functionality and optional analytics cookies to understand usage and improve content. The cookie consent control presented on the site allows you to accept or reject analytics cookies while essential cookies remain active to ensure secure operation. Analytics data is processed in aggregated or pseudonymised form and retained for performance monitoring. If you prefer to manage cookies via your browser settings, you may do so, but disabling certain cookies may affect site features. For details about the specific cookies in use, their purpose and retention periods, please contact us at the address below and we will provide a current cookie list.
Security, retention and rights
We maintain technical and organisational measures to protect personal data from unauthorised access, loss or misuse. Access to client data is restricted to personnel with a business need and subject to confidentiality obligations. Data retention periods vary by category and purpose; personal data linked to a completed engagement is retained for a reasonable time to meet professional, contractual and regulatory obligations and then securely deleted or archived. You have rights to access, rectify, restrict processing, object, request erasure and request portability as applicable under local law. To exercise rights or raise a privacy concern, contact our Data Protection Lead using the contact details below. Where required, we will respond within statutory timeframes and provide information on further remedies, including supervisory authority contact details.
Contact & controller details
Softgrovepath Ltd is the data controller for personal data processed in connection with our advisory and website services. For privacy enquiries or to exercise your data subject rights, contact:
Softgrovepath LtdData Protection Lead
12 Orchard Lane, Suite 4B
London, SW1A 1AA
United Kingdom
If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) in the UK or the relevant supervisory authority in your jurisdiction.