Privacy Policy | Mount Crescent Research

Data Privacy Policy

1. Introduction

Mount Crescent Research ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR).

Our Details:

Company Name: Mount Crescent Research
Registered Address: 71-75 Shelton Street, London, England, WC2H 9JQ
Contact Email: info@mountcrescentresearch.com

2. Information We Collect

We collect and process the following categories of personal data:

2.1 Personal Information You Provide

Contact Details: Name, email address, and telephone number
Business Information: Company name, job title, and other information you choose to provide when contacting us or engaging our services
Communications: Records of correspondence and interactions with us

2.2 Information We Do Not Collect

We do not:

Use cookies or tracking technologies on our website
Collect special category data (such as health information, racial or ethnic origin, political opinions, religious beliefs, biometric data, or genetic data)
Collect data about children

3. How We Collect Your Information

We collect personal data through:

Direct interactions when you contact us by email, telephone, or post
When you request information about our services
When you engage us to provide consultancy services
When you sign up to receive marketing communications
Business cards exchanged at events or meetings

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

4.1 Contractual Necessity

Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This includes:

Providing consultancy services you have requested
Communicating with you about projects and deliverables
Invoicing and payment processing

4.2 Legitimate Interests

Processing is necessary for our legitimate business interests, specifically:

Maintaining records of our business relationships
Improving our services
Managing our business operations
Protecting our legal rights

We have carefully balanced our legitimate interests against your rights and freedoms and have concluded that processing is proportionate and does not override your interests.

4.3 Consent

For marketing communications, we rely on your explicit consent. You have the right to withdraw this consent at any time by contacting us at info@mountcrescentresearch.com or using the unsubscribe link in our marketing emails.

4.4 Legal Obligation

Processing may be necessary to comply with legal obligations, such as tax and accounting requirements.

5. How We Use Your Information

We use your personal data for the following purposes:

Service Delivery: To provide consultancy services and fulfil our contractual obligations
Client Management: To manage our relationship with you, respond to enquiries, and maintain records
Marketing: To send you information about our services, industry insights, and updates (only with your consent)
Business Operations: To administer our business, including financial management and record-keeping
Legal Compliance: To comply with legal and regulatory requirements
Business Development: To identify potential opportunities for collaboration

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties.

6.1 Limited Sharing

We may share your personal data only in the following circumstances:

Legal Requirements: When required by law, regulation, legal process, or governmental request
Professional Advisors: With our lawyers, accountants, or other professional advisors when necessary for legal or business purposes, under strict confidentiality obligations
Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the relevant third party, subject to the same privacy protections

6.2 No International Transfers

We do not transfer your personal data outside the United Kingdom or European Economic Area (EEA).

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Secure storage of electronic and physical records
Access controls limiting data access to authorised personnel only
Regular review of our security practices
Encryption of sensitive communications

While we take reasonable steps to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but remain committed to protecting your information to the best of our ability.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations:

Active Client Data: For the duration of our business relationship plus seven years (in accordance with UK tax and accounting requirements)
Marketing Contacts: Until you withdraw consent, or for three years from your last engagement with our communications
Prospective Clients: For two years from last contact
Employment Records (if applicable): For seven years after employment ends

After these retention periods, we will securely delete or anonymise your personal data unless we are required to retain it for legal reasons.

9. Your Data Protection Rights

Under UK GDPR and EU GDPR, you have the following rights:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

9.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

9.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal.

9.8 Exercising Your Rights

To exercise any of these rights, please contact us at info@mountcrescentresearch.com. We will respond to your request within one month, though this may be extended by two months for complex requests.

You will not usually need to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply with requests that are

manifestly unfounded, excessive, or repetitive.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data unlawfully or violated your rights.

UK Supervisory Authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113

EU Supervisory Authorities:
You may contact the data protection authority in your EU member state. A list is available at: https://edpb.europa.eu/about-edpb/board/members_en

11. Marketing Communications

We may send you marketing communications about our services if you have:

Requested information from us
Provided your contact details at an event or meeting
Explicitly consented to receive marketing materials

You can opt out of marketing communications at any time by:

Clicking the "unsubscribe" link in our emails
Contacting us at info@mountcrescentresearch.com
Informing us during any communication

Opting out of marketing will not affect service-related communications necessary to fulfil our contractual obligations.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by updating the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically.

For material changes that significantly affect your rights, we will provide more prominent notice or, where required, seek your consent.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Email: info@mountcrescentresearch.com
Address: Mount Crescent Research, 71-75 Shelton Street, London, England, WC2H 9JQ

We are committed to working with you to resolve any privacy concerns promptly and fairly.