Privacy Policy

1. Who is responsible for your information

The data controller is ISH LONDON TRADING & TECH LTD, company number 14322806, registered in England and Wales. Our registered office is Office 1.03 Vauxhall Sky Gardens, 153 Wandsworth Road, London, England, SW8 2GB.

The company is the controller of information processed for its business activities.

Privacy questions and rights requests may be submitted through info@ishlondontradingtech.co.uk or our online enquiry form.

2. Scope of this policy

This policy applies to personal information collected through this website, initial business enquiries, meetings, correspondence, supplier and professional-partner contacts, and the administration of consultancy engagements. A separate or supplemental notice may be provided where a particular service, project or regulated professional has different processing arrangements.

3. Information we may collect

• Identity and contact information: name, job title, organisation, email address, telephone number and preferred contact method.
• Enquiry and engagement information: service area, jurisdiction, project stage, commercial objective, timing, correspondence, meeting notes, proposals and instructions.
• Business administration information: contracts, billing details, transaction records, supplier information and professional credentials.
• Website and security information: IP address, browser and device information, timestamps, security logs, consent choices and information needed to prevent abuse of the enquiry form.
• Information supplied by other people: where appropriate, professional advisers, project participants, public registers, counterparties or organisations involved in an enquiry may provide information.

4. Sensitive and confidential information

Some enquiries may involve commercially sensitive material or personal information that receives additional legal protection, such as health, ethnicity, political opinions, trade-union membership, biometric data or criminal-offence information. Please do not include this information in the initial web form unless it is genuinely necessary. Where such information is required, we will identify an appropriate lawful condition and handling method.

Submitting an enquiry does not by itself create a solicitor-client relationship, legal professional privilege, fiduciary relationship or contractual duty of confidentiality beyond any duty arising under applicable law.

5. How and why we use personal information

Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and whether your rights override them.

6. Domain registration, hosting and infrastructure

The domain registrar and website-hosting brand is iv.lt. The provider is recorded as Interneto vizija UAB, registration number 126350731, of J. Kubiliaus g. 6, LT-08234 Vilnius, Lithuania.

The provider may process website files, databases, enquiry-form data, email-routing information, server logs and backups as necessary to supply hosting and related services. Its published data-processing terms identify the primary storage country as Lithuania (European Economic Area) and identify UAB Rakrėjus, company number 303126701 as a subprocessor. These details are maintained against the current service plan and provider agreement and are reviewed whenever the infrastructure or supplier arrangements change.

7. Other recipients of personal information

We may share information only where reasonably necessary with:

• email, IT-security, document-management and professional-administration providers;
• accountants, auditors, insurers and other business advisers;
• appropriately qualified consultants, engineers or project specialists involved in an agreed assignment;
• independent authorised legal, financial or immigration professionals where you have been told about the proposed involvement and there is an appropriate basis;
• courts, regulators, law-enforcement bodies, tax authorities or other public bodies where disclosure is required or permitted by law;
• a purchaser, investor or successor organisation as part of a genuine corporate transaction, subject to suitable confidentiality protections.

We do not sell personal information. We require service providers acting as processors to protect information and use it only on our instructions.

8. International access and transfers

The primary website-hosting and storage location is Lithuania (European Economic Area). Lithuania is a member of the European Economic Area. UK organisations may currently transfer personal information to EEA countries under UK adequacy arrangements, but we will keep the legal position and the provider’s actual processing locations under review.

Our wider consultancy work may also involve international projects, professionals or service providers. Where personal information is transferred outside the United Kingdom and is not covered by adequacy regulations, we will consider appropriate contractual safeguards, transfer-risk assessment and any applicable exception before the transfer.

9. How long we keep information

We keep information only for as long as reasonably necessary for the purpose for which it was collected, including legal, regulatory, insurance, accounting and dispute-management requirements. Our current working periods are:

• general enquiries that do not become engagements: normally up to 18 months after the last meaningful contact;
• minimal conflict, fraud-prevention or do-not-contact records: for as long as reasonably necessary to protect the company and respect the request;
• contracts, invoices and core engagement records: for the applicable statutory, contractual or insurance period;
• website security records: normally up to 90 days unless an incident requires longer retention;
• optional-cookie preference records: until the preference expires or is cleared.

Information may be kept longer where a complaint, investigation, legal claim, preservation requirement or overriding legal duty applies.

10. Your data-protection rights

Depending on the circumstances, you may have rights to request access, correction, deletion, restriction, portability, or to object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing. You may also object to direct marketing at any time.

We may need to verify your identity and may lawfully refuse or limit a request in certain circumstances. We will explain our decision and the available complaint route.

11. Questions and complaints

Please contact us first through our info@ishlondontradingtech.co.uk or our online enquiry form so that we can try to resolve the concern. You also have the right to complain to the UK Information Commissioner’s Office. The ICO provides current contact and complaint information at ico.org.uk.

12. Changes to this policy

We may update this policy when our services, technology, suppliers or legal obligations change. The latest version will be published on this page with a revised review date. Material changes may also be communicated directly where appropriate.