Data Security and Privacy Policy

Introduction

C. Lewis (UK) Ltd is committed to protecting personal data. This privacy notice explains how we process limited personal data in the course of providing professional services and meeting our legal and regulatory obligations.

We do not operate consumer-facing products or services and do not carry out marketing activities involving personal data.

Personal Data We Process

We may process limited personal data where necessary, including:

  • Contact details (such as name, business email address, and business telephone number)
  • Professional information relevant to an engagement
  • Identification information where required to meet legal or regulatory obligations

We do not intentionally collect personal data from members of the public and do not maintain large-scale personal data databases.

How We Use Personal Data

We process limited personal data only where necessary for the following purposes:

  • To provide professional services to clients and manage client engagements
  • To communicate with clients and professional contacts in connection with an engagement or ongoing professional relationship
  • To invite existing clients or professional contacts to events, briefings, or activities relevant to our professional services
  • To comply with legal, regulatory, or professional obligations

We do not carry out large-scale or consumer marketing, profiling, or automated decision-making. Communications relating to events or professional activities are limited to business contacts and are based on legitimate interests.

Legal Basis for Processing

Where applicable, personal data is processed on one or more of the following legal bases:

  • Performance of a contract or engagement
  • Compliance with a legal or regulatory obligation
  • Legitimate interests, limited to the proper conduct of our professional services

Data Sharing

Personal data is not shared with third parties except where required for the purposes of an engagement, to comply with legal obligations, or where otherwise permitted by law.

Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

Data Retention

Personal data is retained only for as long as necessary in connection with an engagement or to meet applicable legal, regulatory, or professional requirements.

Your Rights

Individuals have rights under UK data protection law, including the right to request access to personal data, subject to applicable exemptions.

Contact

For data protection queries, please contact: jamie.sparrow@clewis.com