Privacy Notice - Phoenix Advisory

If you are a client of Phoenix Advisory, our client privacy notice explains how we handle the information we collect for your engagement.

Who we are

Phoenix Advisory Limited is a UK-based strategic finance advisory business. This notice explains how we collect, use and protect personal data when you visit this website, contact us, book a call, or enquire about our services.

Contact details

Phoenix Advisory Limited
Email: hello@phoenixadvisory.co.uk
Registered office: 17 Reynolds Place, London, SE3 8SX
Company number: 10750241

What personal data we may collect

Name
Email address
Phone number
Company name
Job title
Details you provide in contact forms, emails or booking forms

How we collect it

When you complete a contact form
When you email us directly
When you book a call
When you subscribe to updates, where offered

Why we use your data, and the lawful basis for each

We have set these out together, because the basis depends on the purpose.

What we use it for	Our lawful basis
Replying to your enquiry	Taking steps at your request before entering into a contract. Where you are not asking about becoming a client, our legitimate interests (below).
Arranging and running a Discovery Call	Taking steps at your request before entering into a contract.
Deciding whether we are the right firm for you	Our legitimate interests (below). A person makes this decision, not a machine.
Running, securing and improving this website	Our legitimate interests (below). We do not use analytics or advertising cookies on this site.
Client due diligence, identity and sanctions checks, and ongoing monitoring	A task carried out in the public interest. Anti-money-laundering law requires us to do this and treats it that way. Where those checks involve sensitive information or information about alleged or actual offences, we rely on the conditions in Schedule 1 to the Data Protection Act 2018 for preventing or detecting unlawful acts and for meeting regulatory requirements.
Meeting our other legal, tax and professional obligations	Complying with a legal obligation.
Keeping our business and engagement records	Complying with a legal obligation, and our legitimate interests where we keep records for longer than the law requires.
Sending you updates you have asked for	Your consent. You can withdraw it at any time, and every message carries an unsubscribe link.

The legitimate interests we rely on

Where we rely on legitimate interests, these are the interests (we have written down the balancing exercise and you can ask us for it):

Replying to people who contact us. You wrote to us and expect an answer.
Assessing whether an engagement is a good fit, including deciding not to proceed. We are a deliberately narrow practice, and taking on work we cannot serve well is bad for the client before it is bad for us.
Keeping this website available, secure and useful.
Keeping engagement records long enough to advise you properly and to defend a claim.

You have the right to object to any processing based on legitimate interests. Email hello@phoenixadvisory.co.uk and we will stop unless we have compelling grounds not to, and we will tell you either way.

Who we share it with

We do not sell your data and we do not share it for anyone else’s marketing. We use these categories of provider, and they act on our instructions:

Website hosting and content delivery
Scheduling: the booking page on this site is operated by a scheduling provider, and the details you enter there are collected by that provider on our behalf
Email and business productivity
Practice management and client records
Identity verification and anti-money-laundering screening, which uses public registers, sanctions and politically-exposed-person lists and adverse-media sources
Professional advisers, including our accountants, insurers and legal advisers

We also disclose data where the law requires it: to our supervisory body, to HMRC, and to law enforcement where we are obliged to report.

We review these categories whenever a new kind of provider enters the data path, and in any event once a year.

Sending data outside the UK

Some of these providers are based in the United States or process data there. Where that happens, we rely on the UK International Data Transfer Addendum to the European Commission’s standard contractual clauses, or on the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it. You can ask us which mechanism applies to a particular provider and we will tell you.

How long we keep it

Enquiries and Discovery Call records where you do not become a client	24 months from our last contact
Website server logs	12 months
Anti-money-laundering and client due diligence records	5 years from the end of our relationship with you, as anti-money-laundering law requires
Client and engagement records	For as long as we need them to advise you, to meet our tax, company-law and professional obligations, and to defend a claim, and no longer
Marketing preferences	Until you withdraw them

Your rights

You have the right to ask us for a copy of your data, to have it corrected, to have it erased, to restrict how we use it, to receive it in a portable form, and to object to processing based on legitimate interests. Where we rely on your consent you can withdraw it at any time, and withdrawing it does not affect anything we did before you did.

Some of these rights are limited where the law requires us to keep something. In particular, we cannot delete anti-money-laundering records before the five years are up, and there are checks we are not permitted to tell you the details of.

We do not make any decision about you by automated means alone.

Email hello@phoenixadvisory.co.uk to exercise any of these.

Complaints

If you have concerns about how your data is handled, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Updates

This notice may be updated from time to time. Please check this page periodically for any changes.

Last updated: 29 September 2026