Privacy Policy

Cast Advisory Ltd ("Cast Advisory", "we", "us") is a company registered in England and Wales. We operate the website castadvisory.co.uk and are the data controller for personal data collected through it.

For any privacy queries, contact privacy@castadvisory.co.uk.

We only collect data you actively give us, plus minimal technical data needed to run the site:

• Enquiry form: your name, email address, company (optional), and the content of your message.
• Booking a call: any details you submit when scheduling a conversation.
• Email correspondence: messages you send us and our replies.
• Technical data: standard server logs (IP address, browser, request paths) retained briefly for security and diagnostics.

We do not use advertising cookies or third-party tracking pixels.

• Responding to enquiries — legal basis: legitimate interest (replying to people who contact us) and, where relevant, steps to enter a contract.
• Sending transactional emails (e.g. confirming your enquiry) — legal basis: legitimate interest.
• Security, fraud prevention and site reliability — legal basis: legitimate interest.
• Compliance with legal obligations (e.g. tax, accounting) — legal basis: legal obligation.

We do not send marketing emails without your explicit consent.

Enquiry and booking data is kept for up to 24 months after our last meaningful contact, then deleted. Records related to a paid engagement are kept for 6 years to meet UK tax and accounting requirements. Server logs are kept for up to 30 days.

We do not sell personal data. We share it only with trusted service providers acting as data processors on our behalf:

• Hosting and database — our managed backend platform (EU-region hosting).
• Email delivery — for sending and receiving transactional email.
• Scheduling — if you book a call through our booking provider.
• Professional advisors — accountants and legal counsel where strictly necessary.

Where any provider is based outside the UK/EEA, we rely on UK-approved safeguards such as the UK International Data Transfer Addendum and Standard Contractual Clauses.

We use only strictly necessary cookies required to make the site work (e.g. security and session). We do not use analytics, advertising or social-tracking cookies. If we add analytics in future, we will update this policy and ask for your consent first.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data ("right to erasure").
• Object to or restrict our processing.
• Request a portable copy of data you provided.
• Withdraw consent at any time (where consent is the legal basis).

To exercise any of these rights, email privacy@castadvisory.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

To exercise any right above, send us an email. To help us verify your identity and respond quickly, please include the details in the template below. We will acknowledge your request within 5 working days and respond fully within one month (UK GDPR Art. 12).

1. Email privacy@castadvisory.co.uk from the address you believe we hold on file.
2. Use the subject line and body below — copy it as-is and fill in the bracketed fields.
3. If we cannot verify your identity from the email alone, we may ask for one additional piece of information (e.g. confirming a recent message you sent us). We will never ask for ID documents unless strictly necessary.
4. There is no fee for a reasonable request. We will tell you in advance if any exceptions apply.

Hello Cast Advisory,

I am making a request under the UK GDPR in relation to personal data you hold about me.

Full name: [your name]
Email address(es) you may have on file: [email(s)]
Company / context of contact (if known): [e.g. enquiry submitted on dd/mm/yyyy]

Request type (please keep the ones that apply):
- Access — please provide a copy of the personal data you hold about me.
- Correction — please update the following information: [details].
- Deletion — please erase my personal data.
- Portability — please provide my data in a portable format (e.g. CSV/JSON).
- Objection / restriction — please stop or restrict processing because [reason].
- Withdraw consent — I withdraw consent previously given for [purpose].

Preferred response format: [email / secure download link]

Thank you,
[your name]

What happens next: we log the request, verify your identity, locate any data we hold (typically enquiry/booking records and email correspondence), and reply with the result. If we need more time for a complex request, we will tell you within 30 days and explain why (UK GDPR allows up to a further 2 months in such cases).

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), access controls on our backend, and least-privilege handling of personal data.

We may update this policy from time to time. The "last updated" date at the top will reflect any change. Material changes will be highlighted on the homepage.

Questions, requests or complaints: privacy@castadvisory.co.uk — or via our contact page.