Privacy notice

Who we are

Ashcairn Ltd (“Ashcairn”, “we”, “us”) is the data controller for the personal data described in this notice. We are a company registered in England and Wales, company number 16995038, with our registered office at 35/37 Ludgate Hill, London, EC4M 7JN. For any question about this notice or your personal data, contact us at info@ashcairn.com.

What this notice covers

This notice explains how we handle personal data in connection with this website and enquiries you send us. It does not cover personal data processed under a signed engagement, which is governed by the relevant contract and any privacy terms agreed with you directly.

The information we collect

We collect only what you choose to send us. When you contact us, by email or using the enquiry form on this site, we receive:

• your name and, if you provide it, your organisation;
• your email address;
• the content of your message.

This website sets no cookies and uses no analytics, advertising or tracking technologies. Our hosting provider records standard technical server logs (such as IP address and browser type) to keep the site secure and running.

How the enquiry form works

The enquiry form on our contact page does not submit your details to a server we control. It opens a pre-filled message in your own email application, which you then send to info@ashcairn.com. Your details reach us as an ordinary email; we do not store form submissions in a database.

Why we process your data, and our lawful basis

We process enquiry data to read and respond to your message and, where relevant, to discuss and progress a potential engagement. Our lawful basis is our legitimate interests (Article 6(1)(f) UK GDPR) in responding to business enquiries and running our practice. Server logs are processed on the same basis, for security and reliability. We do not carry out automated decision-making or profiling.

Who we share it with

We do not sell your personal data or share it for marketing. We use a small number of service providers who process data on our behalf under appropriate contractual terms:

• Vercel Inc. — website hosting and infrastructure, including server logs;
• Microsoft (Microsoft 365) — our email service, which processes the correspondence you send us.

We may also disclose personal data where we are required to do so by law.

International transfers

Vercel and Microsoft are based in, or may process data in, the United States and other countries outside the UK. Where personal data is transferred outside the UK, it is protected by an appropriate safeguard, such as the UK Addendum to the EU Standard Contractual Clauses or the provider’s certification under the UK Extension to the EU–US Data Privacy Framework.

How long we keep it

We keep enquiry correspondence for as long as necessary to respond and, where it leads to a relationship, for the duration of that relationship and a reasonable period afterwards. Correspondence that does not lead to an engagement is deleted once it is no longer needed. Server logs are retained only for a short period by our hosting provider.

Your rights

Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability, in each case subject to legal limits. To exercise any of these rights, contact info@ashcairn.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would welcome the chance to resolve any concern first.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised.