This policy explains how Cannon Hill Partners Ltd collects and uses personal data when you visit this website, contact us or deal with us in the course of our advisory business. It applies UK data protection law: the UK GDPR, the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025) and the Privacy and Electronic Communications Regulations 2003.
1. Who we are
Cannon Hill Partners Ltd is a company registered in England and Wales (company number 16799806). Our registered office is 20 Wenlock Road, London, England, N1 7GU. We are the controller of the personal data described in this policy. You can contact us at info@cannonhillpartners.com.
2. Personal data we collect
- Contact and enquiry data. Your name, organisation, role, email address, phone number and whatever you tell us when you email or call us.
- Business relationship data. Meeting notes, correspondence, proposals and engagement records relating to people at clients, prospective clients, investors, introducers and other professional contacts.
- Professional contact data from other sources. Names, roles and business contact details from public sources, professional networks or mutual contacts, where we think a professional conversation is likely to be relevant to you.
- Technical data. The code of this website sets no cookies and runs no analytics or advertising tools. The company that hosts the site may log technical data such as your IP address, browser type and the pages requested, in order to keep the site secure and running.
We do not ask for sensitive personal data through this website and ask that you do not send it to us.
3. How we use personal data, and why
| Purpose | Legal basis |
|---|---|
| Respond to your enquiry and take steps you ask for before entering into a contract | Contract, or our legitimate interests in running our business |
| Provide advisory services and manage client relationships | Contract, and our legitimate interests |
| Keep in touch with professional contacts, share relevant updates and understand our market | Our legitimate interests in developing an advisory business. You can object at any time. |
| Keep this website and our systems secure | Our legitimate interests |
| Meet legal, regulatory and professional obligations, including record-keeping and financial crime checks | Legal obligation |
| Anything we ask you to opt in to, such as a mailing list | Consent, which you can withdraw at any time |
4. Marketing
We send marketing emails only where the law allows, and we ask for consent where it is required. Every marketing email tells you how to opt out, and we stop when you ask us to. You have an absolute right to object to direct marketing.
5. Who we share personal data with
- Service providers that host our website and support our email, IT, document storage, backup and video-conferencing. They act on our instructions under contract.
- Professional advisers such as lawyers, accountants and insurers.
- Regulators, courts, law enforcement and other authorities where the law requires or permits it.
- With your knowledge, other parties to an engagement or transaction we are working on with you.
- A buyer or successor, if the business is ever sold or restructured, subject to the same protections.
We do not sell personal data.
6. Transfers outside the UK
Some of our providers process data outside the UK. When that happens we rely on a UK adequacy regulation (including the UK–US data bridge for certified US recipients) or on the Information Commissioner’s International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, with a transfer risk assessment where one is required.
7. How long we keep personal data
We keep personal data only for as long as we need it for the purpose it was collected. As a guide, enquiry and professional contact records are kept for up to three years after our last meaningful contact. Engagement records are kept for six years after the engagement ends, which is the usual limitation period for contract claims in England and Wales. Records we are required to keep by law are kept for the period the law requires. After that we delete or anonymise them.
8. Security
We use technical and organisational measures appropriate to the risk, such as access controls and confidentiality obligations for anyone with access to personal data. No system is completely secure, so please take care when sending sensitive information by email.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is inaccurate or incomplete;
- ask us to delete your data in certain circumstances;
- ask us to restrict how we use your data in certain circumstances;
- receive data you gave us in a portable format, where we process it by automated means on the basis of consent or contract;
- object to processing based on our legitimate interests, and to direct marketing;
- withdraw consent at any time, where we rely on it.
We do not make decisions about you using solely automated processing that have legal or similarly significant effects. To use any of your rights, email info@cannonhillpartners.com. We normally respond within one month, may need to confirm your identity, and do not normally charge a fee.
10. Complaints
If you are unhappy with how we have handled your personal data, please tell us at info@cannonhillpartners.com. We will acknowledge your complaint within 30 days, look into it properly and tell you the outcome without undue delay. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
11. Links to other websites
This website, including our sector news briefing, links to websites we do not control. Their own privacy notices apply when you visit them.
12. Changes to this policy
We update this policy when our practices or the law change. The date at the top of the page shows when it was last revised.