Gentleharborview
Financial Risk Assessment

Privacy Policy

This Privacy Policy explains how Gentleharborview Ltd collects, uses, retains and discloses personal information when we provide consulting services or when you visit our website. Our registered office is Gentleharborview Ltd, 12 Harbour View, Canary Wharf, London E14 5AB, United Kingdom. For privacy questions, contact [email protected] or use the contact form on our contact page. This policy applies to prospective and current clients, site visitors, and any third parties who provide information to us in the course of a service engagement. We process personal data to perform contractual obligations, to comply with legal requirements, and on the basis of legitimate interests where appropriate. We aim to be transparent about our practices and to ensure that personal data is handled lawfully, fairly and securely.

Information we collect and how we use it

We collect information you provide directly to us, including contact details, organisation and role, correspondence, project requirements, and contractual documents. When you engage our services we may also process financial and transactional information necessary to deliver services, such as invoices, billing records, and contractual terms. We collect technical information from visitors to our website such as IP address, browser type, device identifiers and usage data. These logs help maintain site security, diagnose issues and improve the user experience. We use personal information to respond to enquiries, deliver services, prepare proposals, comply with regulatory or legal obligations, and to maintain a record of engagements. Where we rely on legitimate interest, our processing is limited to activities such as fraud prevention, business continuity, model validation and anonymised internal analytics that support service quality and regulatory compliance. We retain data only for as long as necessary to fulfil these purposes or as required by law.

Cookies, analytics and related technologies

Our website uses cookies and similar technologies to provide essential site functions and to collect anonymised analytics that help us improve content and performance. Essential cookies support site navigation, session management and security. Non-essential cookies may include analytics and performance cookies that track how visitors use the site. We do not place tracking cookies without consent for non-essential purposes. The cookie consent control presented on the site lets you accept or reject non-essential cookies; your choice is stored locally using browser storage and respected on future visits. We use reputable analytics providers in anonymised or aggregated form where feasible and restrict data sharing to processors bound by contract to provide appropriate technical and organisational safeguards. If you disable non-essential cookies you will still be able to use core site functionality. For details on the specific cookies we use, contact us and we will provide a current cookie inventory and retention schedule.

Data retention, security, sharing and your rights

We retain personal data for the period necessary to deliver services, to satisfy contractual and legal obligations (for example, tax and regulatory retention periods), and to respond to potential claims. Typical retention for client engagement records is seven years unless a different period is required by contract or regulation. Security measures include access controls, encryption in transit and at rest where appropriate, documented processing procedures, and contractual requirements for processors. We may share information with third-party service providers who act as processors on our behalf, such as secure cloud storage, professional advisors and payment processors; these parties are required to process data only according to our instructions and under contract. Where transfers occur outside the UK or EU, we rely on permitted mechanisms such as standard contractual clauses or other lawful safeguards. You have rights including access to your personal data, correction, erasure in limited circumstances, restriction of processing, objection and data portability where applicable. To exercise rights or to raise a concern, contact us at [email protected]. You may also lodge a complaint with the Information Commissioner’s Office in the United Kingdom if you consider we have not handled your data lawfully.

Changes and updates

We may update this policy periodically to reflect changes in our practices or legal requirements. Where changes are material we will publish an updated effective date at the top of this page and, where appropriate, notify clients and subscribers by email. Continued use of our site or our services after the publication of updates constitutes acceptance of the updated policy. For the most current version of the policy, always refer to this page.