Privacy notice

What we collect, and why

General enquiries

When you use the contact form we collect your name, organisation, email address, optionally a phone number, the type of enquiry and your message. We use this to respond to you and to direct the enquiry to the right person. Lawful basis: our legitimate interest in responding to enquiries about our services, and taking steps at your request before entering a contract.

Training bookings

When your organisation books a training place we collect the delegate's name, job title, email address and phone number, the company name, a company or tax registration number, and billing details such as a purchase order reference. We use this to administer the booking, confirm the course, invoice and deliver the training. Lawful bases: performance of a contract (or steps before one), and legal obligation for invoicing and tax records.

Dietary requirements and access needs are collected separately and only with your explicit consent, because they can reveal health or belief information. They are encrypted at rest, used only to arrange catering and access at the venue, never included in exports, and deleted 30 days after the course ends. You can book without providing them.

Expert services enquiries

When you make an expert services enquiry we collect your name, organisation, email address, optionally a phone number, a brief description of the matter, the names of the parties involved and how soon you need input. We use the parties' names solely to run a conflict check across our experts before any substantive discussion. Lawful bases: our legitimate interests in assessing and responding to the enquiry and in avoiding conflicts of interest, and taking steps at your request before entering an engagement.

An enquiry may therefore include limited information about people other than you, such as the names of parties to a dispute. We use that information only for conflict checking and the assessment of the enquiry, we do not contact those parties, and we ask you not to send privileged or confidential detail at the enquiry stage.

Email and correspondence

If you email us we hold the correspondence for as long as it is needed to deal with the matter and for our records, on the basis of our legitimate interests in running the business.

What we do not do

We do not send marketing emails, we do not sell or share personal information for advertising, we do not use analytics or tracking cookies, and this website has no user accounts. We do not make automated decisions with legal or similarly significant effects.

Who we share information with

We use a small number of service providers to run the website and the business. They process personal information on our instructions under contract:

• Vercel — website hosting; the site is served from London
• Neon — database hosting in London
• An email delivery provider, for booking and enquiry email
• Microsoft 365 — our business email and documents
• Intuit QuickBooks — invoicing and accounting
• The training venue and caterer — dietary and access information necessary to host a course, and nothing more

We may also share information with professional advisers, and with authorities such as HMRC where the law requires it. Some providers are US companies; where any processing or support access happens outside the UK, it is covered by UK-approved safeguards such as the international data transfer agreement or addendum.

How long we keep information

• General enquiries — 12 months after our last exchange
• Booking, invoicing and payment records — 6 years after the end of the financial year they relate to, as tax law requires
• Dietary and access information — deleted 30 days after the course ends
• Expert services enquiries and conflict check records — 2 years, or the life of the engagement plus our professional record keeping period if an instruction follows

When a retention period ends the information is deleted or anonymised.

Cookies

This site sets essential cookies only, and in normal operation sets none at all. There are no analytics, advertising or tracking cookies, which is why the site shows no cookie banner. If that ever changes, this notice will be updated and consent requested first.

Your rights

Under UK data protection law you can ask us for a copy of your personal information, ask us to correct it, delete it or restrict how we use it, object to processing based on legitimate interests, and ask for information you provided to be ported to another provider. Where we rely on consent, you can withdraw it at any time without affecting earlier processing.

To exercise any of these rights, email info@rockwey.com. We will respond within one month.

If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve the issue first.