Privacy Notice

Last updated: November 2026

Who we are

North Quay Holdings Limited ("North Quay", "we") is an intelligence and investigations firm registered in England and Wales, company number 16438926. Our registered office is 1 Curzon Street, London, W1J 5HA and we work from Boston House, 36-38 Fitzroy Square, London, W1T 6EY. We are the data controller for the personal data described in this notice. Our data protection contact is dpo@northquayholdings.com.

Who this notice covers

This notice explains how we use personal data about our clients, prospective clients, their staff and representatives, our suppliers and people who visit our website or contact us.

Where we carry out research or investigations for a client, we may process personal data about other individuals. That processing is governed by our client terms and by a documented legal basis for each assignment. If you believe we hold personal data about you in that context, you may contact dpo@northquayholdings.com and we will respond in line with the law and any exemptions that apply.

What we collect

Contact details: name, job title, employer, email address, phone number and postal address. Engagement details: instructions, correspondence, reports, invoices and payment records. Identity and compliance information we need to take you on as a client. Website data: IP address, browser type, pages visited and how you reached us. Anything else you choose to give us.

Where it comes from

Mostly from you, when you contact us, instruct us or work with us. Some comes from public sources, from introducers and from our own systems when you use our website.

Why we use it and our lawful basis

To provide our services and manage our relationship with you: performance of a contract.

To take you on as a client and meet our legal and regulatory duties, including anti-money laundering checks: legal obligation.

To respond to enquiries, run and protect our business, keep records and tell existing clients about our services: our legitimate interests, balanced against your rights.

To prevent, detect or investigate crime, or to protect people from harm: recognised legitimate interests under UK GDPR.

Where we ask for it, for example before producing a report on publicly available information about you: consent, which you may withdraw at any time.

Who we share it with

We share personal data only where needed: with suppliers who host our systems and support our business, with professional advisers, with insurers, with regulators or law enforcement where the law requires, and with a buyer if we ever sell the business. Suppliers act on our instructions under written contracts.

International transfers

Some of our suppliers store data outside the UK. Where they do, we rely on a UK adequacy decision, the UK International Data Transfer Agreement or another approved safeguard, and we check that the protection for your data will not be materially lower than in the UK.

How long we keep it

We keep client records for the length of the engagement and for seven years after it ends, to meet legal, accounting and regulatory duties and to deal with any claims. Enquiries that do not lead to an engagement are kept for up to two years. Website data is kept for no more than 13 months.

Security

We protect personal data with technical and organisational measures appropriate to the risk, including access controls, encryption and staff training.

Your rights

You may ask to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to our processing, and to receive it in a portable format. You may withdraw consent where we rely on it. Where a decision with legal or similarly significant effects on you is based solely on automated processing, you may make representations, contest it and ask for human review. We do not make decisions of that kind.

To exercise any right, email dpo@northquayholdings.com. We will respond within one month, or up to three months for complex requests, and may pause the clock while we ask you for information we need. Exemptions may apply.

Cookies

Our website uses cookies that are needed for it to work and, with your consent, cookies that help us understand how the site is used. You can change your cookie settings at any time through the banner on the site or your browser.

Complaints

If you are unhappy with how we have used your data, email dpo@northquayholdings.com or write to our registered office. We will acknowledge your complaint within 30 days and tell you the outcome. You may also complain to the Information Commissioner at ico.org.uk or on 0303 123 1113.

Changes

We may update this notice. The date at the top shows when it last changed. Our Data Protection Policy sets out the rules we work to.