Legal
Privacy Policy
Last updated: 11 August 2026
1. Who We Are
Oakbridge Agility Ltd ("Oakbridge Agility", "we", "us", "our") is the data controller responsible for the personal information described in this policy. We provide governance, risk, and regulatory advisory services to financial sector businesses.
Contact details:
Oakbridge Agility Ltd
Registered address: 227a West Street, Fareham, PO16 0HZ, England
1a. Our ICO Registration
Oakbridge Agility Ltd is registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC218589. You can verify this registration at ico.org.uk/ESDWebPages/Search.
1b. Data Protection Officer
Oakbridge Agility Ltd is not required to appoint a Data Protection Officer under UK GDPR, as we do not carry out large-scale systematic monitoring or process special category data at scale. Data protection queries should be directed to the contact details in Section 1.
2. Information We Collect
We collect the following categories of personal information:
- Contact and identification data: name, job title, organisation, email address, telephone number.
- Enquiry and engagement data: the content of enquiries, correspondence, and information provided in the course of an advisory engagement.
- Technical data: IP address, browser type, device information, and pages visited on our website.
We do not collect special category (sensitive) personal data, and we do not use automated decision-making or profiling in relation to individuals.
3. How We Use Your Information and Our Lawful Basis
We use the information we collect for the following purposes, each with its own lawful basis under UK GDPR:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry or request for information | Legitimate interests (to respond promptly to prospective and existing clients) |
| Providing and managing our advisory services | Performance of a contract, or steps taken at your request prior to entering into a contract |
| Sending you information about our services | Legitimate interests, where relevant to your role; or consent, where required under PECR |
| Improving our website and understanding how it is used | Legitimate interests, or consent where analytics cookies are used |
| Complying with our legal and regulatory obligations | Legal obligation |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. Further detail on this assessment is available on request using the contact details in Section 1.
4. How We Share Your Information
We may share your personal information with:
- Service providers who support our operations (for example, IT and website hosting providers), acting under our instructions.
- Professional advisers, including lawyers, auditors, and insurers, where necessary.
- Regulatory and law enforcement bodies, where required by law.
We do not sell or rent personal information to third parties.
4a. International Transfers
We use a small number of third-party service providers to operate this website. Some of these providers are based in the United States, meaning your personal information may be transferred outside the UK. Where this occurs, we rely on the following safeguards:
| Service provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Google Analytics (GA4) | Website usage analytics | United States | Standard Contractual Clauses, via Google's data processing terms |
| GoDaddy Airo | Website hosting and contact/inbox form submissions | United States | GoDaddy's DPA, incorporating Standard Contractual Clauses |
| Google Search Console | Passive website crawl and indexing data | United States | Standard Contractual Clauses, via Google's data processing terms |
Further information about these transfers, including copies of the relevant safeguards, is available on request using the contact details in Section 1.
5. How Long We Keep Your Information
We retain enquiry data for up to three years from the date of last contact. Where an advisory relationship is established, information relevant to that engagement may be retained for longer, in line with our professional, contractual, and regulatory obligations. Retention periods are reviewed periodically and data is securely deleted once no longer required.
6. Your Rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate information;
- Request erasure of your information, in certain circumstances;
- Request restriction of processing, in certain circumstances;
- Request portability of your information, where applicable;
- Withdraw consent, where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
- Object to processing based on legitimate interests.
To exercise any of these rights, please contact us using the details in Section 1. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
7. Cookies
We use the following categories of cookies on our website:
- Strictly necessary cookies — required for the website to function and cannot be switched off. These do not require consent.
- Analytics cookies — help us understand how visitors use our website. These are only set with your consent.
When you first visit our website, you are shown a cookie banner allowing you to accept or reject non-essential cookies before they are set. You may change your preferences at any time via our cookie settings, or by adjusting your browser settings, though browser-level blocking may not withdraw consent already recorded with us.
We do not use cookies for advertising or third-party tracking purposes.
8. Security
We maintain appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or misuse, including access controls, encryption of data in transit, and restricted access to personal information on a need-to-know basis.
9. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this policy or how we handle your personal information, please contact us at:
Oakbridge Agility Ltd
Registered address: 227a West Street, Fareham, PO16 0HZ, England
Email: enquiries@oakbridgeagility.com
You may also contact the Information Commissioner's Office:
Website: ico.org.uk
Telephone: 0303 123 1113