Privacy Notice

Last updated: 2 May 2018


This Privacy Notice is designed to help you understand what personal information we collect, why we collect it, what we do with it, how we keep it secure and your choices when it comes to accessing, updating and deleting your information.

This notice covers personal information processed by GBRW. ‘GBRW’ refers to all or any of GBRW Limited, GBRW Learning Limited, and GBRW Expert Witness Limited.

Information that we collect

Generally, we collect your information when you choose to interact with us. We only collect information that is necessary to carry out our business, provide the services that you requested and to keep you informed of similar services.

The most common situations in which we might collect your personal information are:

- If you are a current or past client or have expressed interest in becoming a client

- If you share your CV with us, or a third party shares it with us on your behalf

- If you contact us seeking information about any aspect of our business or services

- If you are a current or past Associate of GBRW, or have expressed an interest in becoming an Associate

- If you are a current or past Director or Principal Consultant of GBRW

- If you subscribe to our newsletter

- If you give us your business card and/or other contact information

- If you open our marketing emails and/or click on the links contained within those emails

The type of information that we collect depends on the reason for which it is gathered. We may collect:

- Prefix, Name

- Email address

- Contact information such as Mailing address and Telephone number

- CV, which, in addition to the information listed above, might include your date of birth, educational history, professional background and experience, certifications and memberships, and marital status

- Payment details, if we have needed to pay you for services or products

- Your history of interaction with our marketing emails e.g. whether the email was opened, and any links within that were clicked on

- Passport and Visa information, if you provided this as part of delivering a project with us

Why we collect this information

When you provide personal information to us, we may use it for any of the purposes described in this Privacy Notice or as stated when we collected the information (or as obvious from the context of collection), including:

- If you are a Client, delivering our services to you effectively and efficiently

- If you are an Associate or potential Associate, identifying possible consulting, training or expert witness opportunities in which we might cooperate

- If you were previously or are currently a Director or Principal Consultant, creating and storing of contracts, managing payments and identifying opportunities for you

- Developing our business and services

- Understanding how effective and useful our marketing is

- Fulfilling our contractual obligations

The lawful basis for processing personal information

By law, we are only able to process your personal information if one or more of the following conditions applies:

- We can demonstrate a legitimate interest in the effective delivery of information and services to you and/or our clients, and in the effective and lawful operation of our businesses (provided these do not interfere with your rights)

- The processing relates to a contract that we have with you, or because you have asked us to take specific steps before entering into such a contract

- You have agreed to us processing your personal information for the relevant purpose. You also have the right to withdraw your consent at any time

Your rights

With regards to your personal data and how we process it, you have the following rights:

- The right to be informed

- The right of access

- The right to rectification

- The right to erasure

- The right to restrict processing

- The right to data portability

- The right to object

- Rights in relation to automated decision-making and profiling

Sharing your information with other organisations

From time to time, we may share your personal information between our three companies, GBRW Limited, GBRW Learning Limited and GBRW Expert Witness, if there is a legitimate interest in sharing information between our companies for administrative purposes.

We may share your personal information with our service providers such as banks, payment processors, printers, database service providers, secure cloud storage providers, website hosting providers and email delivery service providers. Before sharing your personal information, we make sure that all such service provider meet relevant UK data protection regulations and legislation and that they will not use your personal information for anything other than the clearly defined purpose relating to the service that they are providing.

We may share your personal information with third parties – for example, to find consulting, training and/or expert witness opportunities for Associates. We will only do this once we have your consent; you have the right to withdraw your consent at any time by contacting us at or (as appropriate) or emailing your contact at GBRW.

We will never share your personal information with any third parties for marketing purposes without your prior consent.

International Transfers

As GBRW is an international business, there may be instances in which your personal information is transferred to and stored outside of the EU. We only do this if:

- There is a EU model contract in place that ensures the recipient complies with the General Data Protection Regulation; or

- We have your prior consent, where we clearly explain how and to whom your information is being transferred outside of the EU; or

- The transfer is necessary for the performance of a contract between you and us, or the implementation of pre-contractual measures taken at your request or with your knowledge; or

- The transfer is necessary for the performance of a contract concluded between GBRW and another natural or legal person and in which you are an interested party.

Information security

GBRW is committed to protecting your personal information. We use appropriate technologies and policies so that your personal information is protected from unauthorised access and improper use.

How long we keep your information

We will retain your personal information only for as long as necessary, given the purposes for which it was collected, or as required to do so by law.

If you choose to unsubscribe from a mailing list, we may keep certain limited information about you so as to ensure that we are able to continue to honour your request.

Your choices and unsubscribing

If you wish to view, update and/or delete the personal information that we hold on you, or you want us to stop using your information or to stop contacting you, then please let us know by emailing or (as appropriate).

If you want to unsubscribe from our marketing newsletter, please click on the unsubscribe link at the bottom of our email newsletter or email us directly at or (as appropriate).

Updates and further information

This Privacy Notice was last updated on 2 May 2018.

If you have any questions or complaints about this Privacy Notice or the way your personal information is processed by us, or would like to exercise your rights as described above, please contact us at

Address: Level 17, Dashwood House, 69 Old Broad Street, London EC2M 1QS, UK

Email: or (as appropriate)

You also have the right to lodge a complaint with your local data protection regulator. In the UK, that is the Information Commissioner’s Office (