Privacy Policy

We collect only what we need to answer an enquiry and to deliver an engagement.

Information you give us

• Through the consultation form: your name, company, email address, country of operation, revenue stage and the message you write.
• By email or during a call: whatever you choose to send us, including documents relating to your company, its ownership and its finances.
• During an engagement: identity and verification documents, corporate records, and financial information necessary to complete the work or to satisfy anti-money-laundering obligations.

Information collected automatically

Our hosting provider records standard server logs when a page is requested, including IP address, browser user agent, the page requested and the time of the request. These are used to operate and secure the site and are retained for a short period.

This website sets no advertising or analytics cookies and runs no third-party tracking scripts. If that changes, this policy will be updated and, where the law requires it, your consent will be sought before any non-essential cookie is set.

• To respond to your enquiry and to discuss a possible engagement — steps taken at your request prior to entering a contract, and our legitimate interest in responding to approaches made to the firm.
• To deliver services you have engaged us for — performance of our contract with you.
• To meet legal and regulatory obligations, including client due diligence, record keeping, accounting and tax — compliance with a legal obligation.
• To secure the website and prevent abuse of the enquiry form — our legitimate interest in protecting the firm and its systems.
• To send occasional written material about our services, where you have asked for it — your consent, which you may withdraw at any time.

We do not sell personal data, we do not share it for third-party marketing, and we do not use it to make automated decisions producing legal or similarly significant effects.

We share personal data only where it is necessary, and only with parties bound to protect it:

• Our hosting provider, which operates the infrastructure this site runs on.
• Our email provider, which delivers enquiries from the form to our inbox.
• Professional advisers — accountants, solicitors and insurers — where necessary and under a duty of confidence.
• Banks, payment providers and registries, but only where you have asked us to make an application or filing on your behalf.
• Law enforcement, regulators or courts, where we are required by law to disclose.

Some of our suppliers process data outside the United Kingdom. Where personal data is transferred outside the UK, we rely on an adequacy decision where one applies, or otherwise on the International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses, together with any additional safeguards the transfer requires.

Because we advise on cross-border matters, an engagement may also involve sending your information to institutions in the country you are expanding into or from. We will tell you before doing so.

• Enquiries that do not become engagements: up to twenty-four months from your last contact with us, then deleted.
• Client records: for six years after the end of the engagement, which is the period our statutory, tax and professional obligations require.
• Client due diligence records: for five years after the end of the business relationship, as anti-money-laundering rules require, unless a longer period is legally justified.
• Server logs: a short operational period, typically no more than thirty days.

When a retention period ends, records are deleted or securely destroyed.

Under the UK GDPR you have the right to:

• Ask what personal data we hold about you and receive a copy of it.
• Have inaccurate data corrected.
• Ask us to delete data, where we have no continuing lawful reason to keep it.
• Ask us to restrict how we use it, or object to our use of it where we rely on legitimate interests.
• Receive data you gave us in a portable, machine-readable form.
• Withdraw consent at any time, where consent is the basis we rely on.

To exercise any of these, write to polarisbridgeltd@gmail.com. We will respond within one month. We may ask you to verify your identity first, and some rights are qualified — we cannot, for example, delete records we are legally obliged to retain.

If you are unhappy with how we have handled your data, please tell us so that we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We apply access controls, encryption in transit, and limits on who within the firm can see what. Identity and financial documents are held only for as long as the engagement and our legal obligations require. No system is perfectly secure, and we will notify you and the Information Commissioner’s Office where a breach requires it.

Our services are provided to businesses. This site is not directed at children, and we do not knowingly collect data from anyone under eighteen.

We will update this page when our processing changes, and will change the effective date above. Where a change is material and affects you, we will tell you directly.