We use cookies to improve your experience on our site. By using our site you consent cookies.
©2026 Unity Advisory
All rights reserved
Privacy Notice
Unity Advisory respects your privacy and is committed to protecting your personal data. This Privacy Notice (“Privacy Notice”) will inform you as to how we process personal data when you visit our website, when you contact us about our services and in the course of providing services for our clients. Our website is not intended for children and we do not knowingly collect personal data relating to children.
Purpose of this Privacy Notice
This Privacy Notice aims to give you information on how Unity Advisory collects and processes personal data belonging to you, your personnel (including your directors, shareholders, employees, workers and agents) and (where relevant) other individuals relating to you or who you deal with in the context of our providing services to you or your business and in relation to anyone who visits our website or otherwise interacts with us.
It is important that you read this Privacy Notice together with any other privacy notice or policy we may provide when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.
Controller
Unity Advisory is made of different legal entities, including Unity Advisory Opco 1 Limited (with company number 16351321), Unity Advisory Opco 2 Limited (with company number 16351322) and Unity Advisory Holdco Limited (with company number 16351090 and ICO registration number ZB891334). Our principal place of business is Nightingale House 2nd Floor, 65 Curzon Street, London, United Kingdom, W1J 8PE.
This Privacy Notice is issued on behalf of the group of entities referred to above so when we mention “Unity Advisory”, “we”, “us” or “our” in this Privacy Notice, we are referring to the relevant entity in the Unity Advisory Group responsible for processing your personal data as data controller.
Data processing for clients
In most cases, Unity Advisory acts as a data controller in relation to the processing of personal data as set out in this Privacy Notice. However, in some circumstances, we may process personal data on our clients’ behalf as a processor for the purposes of data protection laws. Where we process any personal data on your behalf as your processor, the terms set out in our data processing addendum shall apply – a copy of which is available by sending an email to privacy@unity-advisory.com.
Contact details
If you have any questions about this Privacy Notice or our privacy practices, please contact our privacy manager in one of the following ways:
Email address: privacy@unity-advisory.com
Postal address: Nightingale House 2nd Floor, 65 Curzon Street, London, United Kingdom, W1J 8PE
Keeping your information up to date
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data which we have grouped together as follows:
Identity Data includes full name, title, date of birth, signature(s), utility bills, bank statements, national identification, national insurance number(s) and photographic identification data.
Contact Data includes name, home or business (including billing and delivery) address, email address and telephone numbers.
Financial Data includes bank account and payment card details necessary for invoicing and payment.
Service & Transaction Data includes:
information relating to the service in which you are seeking our advice or representation, including personal data contained in emails, correspondence and other documents which you may provide to us. This may include information relevant to advisory or consultancy services (for example, employment-related information or salary information provided in connection with tax-related services) capable of identifying and relating to an individual.
details about payments to and from you and other details of services you have obtained from us.
Technical Data includes information collected from your device and your interactions with our website (such as IP address, browser type and version, time zone setting, operating system and platform, and other device identifiers), as well as information we obtain from our IT and communications monitoring; information from cookies on our website and similar tracking technologies used in our marketing emails; this may also include information from building access controls.
Marketing and Communications Data includes your preferences in receiving marketing from us (and, if relevant, third parties) and your communication preferences, including information collected through your interactions with our marketing emails (for example, whether an email has been opened or links clicked).
Third Party Sourced Data includes information from company registrars (e.g. Companies House in the UK) and information from your professional online presence (e.g. website, LinkedIn profile etc.).
We may also collect, use and share Anonymised Data such as statistical or demographic data for any purpose. Anonymised Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity.
In certain circumstances, our collection of the different categories of data set out above may include the collection of Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). We also may collect Criminal Convictions and Offences Data.
If you fail to provide personal data
Where we need to collect personal data by law, to carry out your instructions, or under the terms of our services with you (as set out in our terms of business), or to respond to an enquiry, and you fail to provide that data when requested, we may be delayed or unable to perform our services to you.
Personal data of affiliated individuals
Where the personal data relates to your directors, shareholders, beneficial owners, employees, agents, associates, family members or other individuals that you deal with or have personal data about, you confirm that your provision of this personal data to us is lawful under applicable data protection laws.
We use different methods to collect data from and about you including:
when we collect the information from you directly, particularly when we communicate with you by email or other electronic correspondence, by telephone or using video conferencing software. You may give us your Identity, Contact, Service & Transaction and Financial Data by filling in forms (including online forms on our website) or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
make a request for our services;
liaise with us as part of our services;
subscribe to our publications;
request marketing to be sent to you;
submit an enquiry through our website;
complete a survey; or
provide us with feedback.
in the process of carrying out work for you and/or your business;
networking (for example, at in-person or virtual events);
via our website - we may use cookies on our website and similar tracking devices in our marketing emails and we may collect information about how you use our website (such as pages viewed and links clicked) (for more information on our use of cookies and similar tracking devices, please see section 5 of this Privacy Notice and also our Cookie Policy);
via our information technology systems, including our client relationship management and finance systems and similar systems, building access control systems, by virtue of our access to CCTV footage, through your use of our Wi-Fi service and from our reception logs;
from publicly accessible sources, (for example, UK Companies House);
from third parties (for example, professional advisors, consultants and other professionals you or we may engage);
government departments (like HMRC) or relevant regulator or professional bodies; and/or
otherwise through providing our services and operating our business.
Our website uses cookies and similar technologies. Some cookies are essential for the operation of the website and enable basic functions, such as page navigation and access to secure areas. We may also use optional cookies, for example to help us understand how visitors use our website or to improve its functionality. Where required under data protection or e-privacy laws, and unless an exception applies under such laws, we will ask for your consent before using any cookies. You can change your browser settings to block or manage cookies at any time. If you have any questions about our use of cookies, please contact us using the details set out in section 2 above. Please also see our Cookie Policy for further information.
We will only use your personal data when we have a legal basis to do so. Most commonly, we will use your personal data in the following circumstances:
where we need to perform the contract that we are about to enter into, or have entered into, with you;
where it is necessary for our legitimate interests to provide our services (or those of a third party) and your interests and fundamental rights do not override those interests. These legitimate interests include our interests in managing our relationship with our clients, prospective clients and their staff, providing the necessary services to our clients, hosting clients and others at our offices, hosting virtual and in-person events and ensuring appropriate standards and compliance with policies, practices or procedures, and in improving and developing our services and website;
where we need to comply with a legal obligation to which Unity Advisory is subject (for example, to meet regulatory, tax or record-keeping requirements); and
where the context is necessary for us to process Special Category Personal Data or where we have obtained your explicit consent to do so. If we seek and obtain your consent, you may withdraw it at any time.
The table in the next section below further explains the purposes for which Unity Advisory may use your personal data and our legal basis for doing so.
Purposes for which we will use your personal data
We have set out below, in a table format, a description of the ways we may use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Purpose or activity | Type of data | Lawful basis for processing including basis of legitimate interest |
|---|---|---|
To check whether we can provide our services to you as a new or existing client, or on an instruction involving a new or existing client, and carry out all of our regulatory compliance requirements, including conflicts of interest, anti-money laundering, anti-terrorism, sanctions, fraud and background screening checks (where applicable to the services we provide). | Identity, Contact, Financial, Service & Transaction, Third Party Sourced. | As is necessary to comply with a legal or regulatory obligation. Where the above does not apply, as is necessary for our legitimate interests (to detect and prevent, among other things, the commission of fraud, money laundering and terrorism offences). We consider this use to be necessary for our legitimate interests and proportionate. |
To deliver our services to you including (but not necessarily limited to) advisory and consultancy services (and, where applicable, tax services), providing related advisory and ancillary services, outsourced services, regulatory purposes, engaging service providers, managing payments, fees and charges and collecting and recovering money owed to us. | Identity, Contact, Financial, Service & Transaction, Technical, Third Party Sourced, Marketing and Communications. | For the performance of our contract with you. Where the above does not apply, as is necessary for our legitimate interests (to deliver our services, manage payments and recover debts due to us). We consider this use to be necessary for our legitimate interests and proportionate. |
To manage our relationship with you, including responding to your enquiries, which will include notifying you about changes to our terms or Privacy Notice. | Identity, Contact, Financial, Service & Transaction, Technical, Marketing and Communications. | For the performance of our contract with you. Where the above does not apply, as is necessary for our legitimate interests to manage our client relationships and prospective-client relationships. We consider this use to be necessary for our legitimate interests and proportionate. |
To respond to website enquiries or contact form submissions, including requests for information. | Identity, Contact and Technical. | As is necessary for our legitimate interests (to respond to enquiries and operate our business). |
To carry out associated administration, record keeping and accounting in connection with your matters and other processing necessary to comply with our professional, legal and regulatory obligations. | Identity, Contact, Financial, Service & Transaction, Technical, Third Party Sourced. | For the performance of our contract with you. Where the above does not apply, as is necessary to comply with our legal and regulatory obligations. |
To comply with our internal business policies and for operational reasons, such as improving efficiency, training and quality control. | Identity, Contact, Financial, Service & Transaction, Technical, Third Party Sourced. | It is in our legitimate interests or those of a third party to adhere to our own internal procedures so that we can deliver an efficient service to you. We consider this use to be necessary for our legitimate interests and proportionate. |
To analyse the use of our website, monitor its performance, maintain security, and improve the content and user experience. | Technical. | As is necessary for our legitimate interests (to understand how visitors use our website, maintain the security of our website and keep it updated and relevant). Where cookies or similar technologies are used, and consent is required under applicable data privacy laws, we will rely on your consent. |
To address any complaints or claims and/or to enforce legal rights or defend or undertake legal proceedings. | Identity, Contact, Financial, Service & Transaction, Technical, Third Party Sourced. | As is necessary for our legitimate interests to manage our client relationships. We consider this use to be necessary for our legitimate interests and proportionate. Otherwise, and where necessary, as is necessary for the establishment, exercise or defence of legal claims. |
To protect the security of our systems and data used to provide services and to prevent unauthorised access and modifications to our systems. | Identity, Contact, Financial, Service & Transaction, Technical. | As is necessary to comply with a legal or regulatory obligation. Where the above does not apply, as is necessary for our legitimate interests to prevent and detect activity that could be damaging for us, you and/or anyone else. We consider this use to be necessary for our legitimate interests and proportionate. |
To make suggestions and recommendations to you about services that may be of interest to you or to otherwise carry out marketing (including sending you alerts, newsletters, announcements, invitations to events, updates or other notifications which may be of interest to you). | Identity, Contact, Technical, Third Party Sourced, Marketing and Communications. | It is in our legitimate interests to market our services in order to promote and grow our business. We consider this use to be proportionate and will not be prejudicial or detrimental to you. In some cases, we may rely on your consent (e.g. where we are required to do so before marketing to you or for the use of cookies or similar tracking technologies we use within our marketing emails to track delivery and log when emails are opened or links clicked). |
To carry out credit reference checks. | Contact, Identity, Financial, Service & Transaction, Third Party Sourced. | It is in our legitimate interests to carry out credit control and to ensure our clients are likely to be able to pay for our services. Where carried out, we consider this use to be necessary for our legitimate interests and proportionate. |
To assist with external audits and quality checks. | Contact, Identity, Financial, Service & Transaction, Third Party Sourced. | As is necessary to comply with a legal or regulatory obligation. Where the above does not apply, as is necessary to maintain appropriate standards for our business so we can demonstrate we operate at the highest standards. We consider this use to be necessary for our legitimate interests and proportionate. |
Marketing
We may use your personal data to notify you by email about our services and updates which we think you may find valuable, by sending you newsletters, invitations to seminars and similar marketing. Unless by law we need your consent to send you marketing information, we have a legitimate interest in using your personal data for marketing purposes (see the table above).
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us using the details set out in this Privacy Notice.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Special category data
Some of the personal data which you provide to us, or which we may receive, may be Special Categories of Personal Data (see section 3 for the definition). We may process these Special Categories of Personal Data on the basis of one or more of the following:
where you have given explicit consent to the processing of the personal data for one or more specified purposes;
where the processing is necessary for the establishment, exercise or defence of legal claims; and/or
where the processing is necessary for reasons of substantial public interest, in accordance with applicable law.
Criminal convictions and offences
We may collect and store Criminal Convictions and Offences Data (including the alleged commission of offences) only where necessary for the purposes of:
the prevention or detection of an unlawful act and where this is necessary for reasons of substantial public interest;
obtaining legal advice; or
establishing, exercising or defending legal rights.
Email monitoring
Emails which you send to us or which we send to you may be monitored by us to ensure compliance with professional standards and our internal compliance policies. Monitoring is not continuous or routine but may be undertaken on the instruction of someone with appropriate seniority where there are reasonable grounds for doing so.
We may share your personal data with the parties set out below for the purposes set out in section 5 above or where required by law:
our directors, officers, personnel and consultants as necessarily required;
other entities and offices in the Unity Advisory group of companies;
third party processors, service providers, representatives and agents that we use to make our business more efficient, including for our IT services, administrative services, cloud services, data storage/back-up and marketing;
professional advisers, including legal advisers, technology consultants, pension providers, financial services providers, investment brokers, auditors and insurers;
our professional indemnity insurers or brokers, lawyers and our auditors, or risk managers who we or they may appoint;
debt collection lawyers or agencies;
if we consider disclosure to be required by law or the rules of any applicable governmental, regulatory or professional body. These may be law enforcement agencies, regulators (e.g. the ICO) and other authorities where relevant. In certain circumstances, we may be prohibited from telling you that a disclosure has been made; and
third parties (together with their advisors) to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then we will ensure you are notified accordingly, and the new owners may use your personal data in the same way as set out in this Privacy Notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. Where processing of personal data is carried out by a third party processor on our behalf, we endeavour to ensure that the processor provides sufficient guarantees to implement appropriate technical and organisational measures so that processing will meet the requirements of data protection laws.
To deliver services to you, it may sometimes be necessary for us to transfer and store your personal data outside the UK, or the European Economic Area (together “European Territories”) as follows:
with our service providers located outside the European Territories;
if you are based outside the European Territories; and/or
where there is an international aspect to the services you have instructed us to carry out.
Where applicable data protection laws apply, and personal data is transferred by us to, and stored outside, the European Territories, we take steps to provide appropriate safeguards to protect your personal data, including:
transferring your personal data to a country, territory, sector or international organisation which the appropriate supervisory authority has determined ensures an adequate level of protection, as permitted under applicable data protection laws;
entering into standard contractual clauses in a form approved by the appropriate supervisory authority, obliging recipients to protect your personal data as required under applicable data protection laws;
in the absence of an adequacy decision or of appropriate safeguards as referenced above, we will only transfer personal data to a third country (that is, outside the European Territories) where permitted under applicable data protection laws.
Please contact us (using the details set out above) if you would like further information on the specific mechanism we use when transferring your personal data out of the European Territories.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted over the internet.
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices or practices. We encourage you to read the privacy notice of every website you visit.
How long will you use my personal data for?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory or reporting requirements or any legitimate business purposes. We may retain your personal data for a longer period if the circumstances are justified, for example in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research, analytics or statistical purposes, in which case we may use this information indefinitely without further notice to you.
Under certain circumstances, you have rights under data protection laws in relation to your personal data to:
Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of your personal data which we are processing. We may refuse to comply with a subject access request (partly or wholly where applicable) if the request is:
manifestly unfounded or excessive or repetitive in nature;
in relation to information in respect of which a claim to legal professional privilege could be maintained in legal proceedings;
in respect of information in respect of which we owe a duty of confidentiality to a third party; and/or
an alternative exception applies under applicable law.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. We may refuse to comply with a request for correction if the request is manifestly unfounded or excessive or repetitive.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with an applicable law. Note, however, your right of erasure arises only in certain circumstances and that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
If you want us to establish the data's accuracy.
Where our use of the data is unlawful but you do not want us to erase it.
Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. This right only applies to information processed by automated means which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
You also have the right to object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. Where you object on this ground, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. You also have the right to object where we are processing your personal data for direct marketing purposes.
Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply. We may refuse a request for erasure, for example, where the processing is necessary to comply with a legal obligation or necessary for the establishment, exercise or defence of legal claims.
How to exercise your rights
You can exercise any of your rights as described in this Privacy Notice and under data protection laws by contacting our privacy manager (see contact details in section 2 above).
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. It will help us to process your request if you clearly state which right you wish to exercise, what personal information it is that is of particular concern to you and, where appropriate, why it is that you are exercising it.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You have the right to lodge a complaint to the UK data protection regulator, the Information Commissioner’s Office (“ICO”). Information on how to contact the Information Commissioner’s Office (“ICO”) is available at www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance (using the contact details in section 2 above).
We keep this Privacy Notice under review and may change it from time to time.
This version was last updated on 28th January 2026.