Last updated on March 2026
Privacy
Website Privacy Policy
Introduction
Beacon Advisory Group (“we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data responsibly.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website or interact with us.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018**,** and other applicable data protection laws.
Who we are
Beacon Advisory Group is the data controller responsible for your personal data.
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
However, we would appreciate the opportunity to address your concerns first.\
Personal data we collect
Personal data means any information that can identify an individual. We may collect the following types of personal data:
Identity data
First name, last name.
Contact data
Email address, phone number, business address.
Technical data
Internet Protocol (IP) address, browser type and version, device information, operating system, and other technology used to access our website.
Usage data
Information about how you use our website and services.
Marketing and communications data
Your preferences in receiving marketing communications from us.
We do not intentionally collect special categories of personal data**,** such as information relating to health, race, religion or political opinions.
How we collect personal data
We collect personal data through:
- direct interactions (for example when you contact us or submit a form)
- automated technologies such as cookies or analytics tools
- communications with clients, suppliers or business contacts.
How we use your personal data
We use personal data for purposes including:
- responding to enquiries
- providing services to clients
- managing relationships with customers or suppliers
- improving our website and services
- sending marketing communications where permitted by law
- complying with legal or regulatory obligations.
Legal basis for processing
Under UK GDPR we must have a lawful basis for processing personal data.
We rely on the following legal bases:
Legitimate interests
Processing necessary for the operation and improvement of our business and services.
Contract
Processing necessary to perform a contract with you or to take steps before entering into a contract.
Legal obligation
Processing required to comply with legal or regulatory obligations.
Consent
Where required, for example when you opt in to receive marketing communications.
Marketing communications
We may send you marketing communications if:
- you have requested information from us
- you have consented to receive marketing communications
- we have another lawful basis under PECR.
You can opt out of marketing communications at any time by:
- using the unsubscribe link in emails
- contacting us at [email protected]
Sharing your data
We may share personal data with trusted third parties where necessary, including:
- professional advisers
- technology or hosting providers
- analytics providers
- regulatory authorities where required by law.
We ensure that third parties processing personal data on our behalf do so in accordance with appropriate data protection obligations.
International data transfers
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as:
- transfers to countries recognised as providing adequate protection
- the use of standard contractual clauses or equivalent safeguards.
Data security
We implement appropriate technical and organisational measures to protect personal data from:
- unauthorised access
- accidental loss
- misuse or disclosure.
Access to personal data is limited to individuals who need it for legitimate business purposes.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting or reporting requirements.
Different retention periods apply depending on the type of data and purpose of processing.
Your data protection rights
Under data protection law you have the right to:
- request access to your personal data
- request correction of inaccurate data
- request deletion of your data
- object to processing
- request restriction of processing
- request transfer of your data
- withdraw consent where processing relies on consent.
To exercise your rights please contact:
We may need to verify your identity before responding to requests.
Changes to this policy
We may update this Privacy Policy from time to time.
Any changes will be posted on this page and the updated version will include a revised date.