Privacy Policy

1. Introduction

NRD Partners (“we”, “our”, or “us”) is committed to protecting your privacy and ensuring your personal data is handled responsibly and in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Notice explains how we collect, use, and protect your personal information when you interact with us — whether through our website, email communications, events, or as part of our professional services.

2. Who We Are

NRD Partners is a cybersecurity and compliance advisory firm based in London, United Kingdom.
We provide cyber risk, assurance, and compliance services to public and private sector organisations.

If you have any questions about this notice or how we handle your personal data, you can contact us at:

📧 Email: info@nrdpartners.co.uk

3. What Information We Collect

We may collect and process the following types of personal data:

• Contact information: name, email address, phone number, job title, and organisation
• Business correspondence: information provided when you contact us or engage with our services
• Technical data: IP address, browser type, and website usage analytics (via cookies or similar technologies)
• Marketing preferences: details of your engagement with our communications or events

We do not collect special category (sensitive) data unless required for a specific engagement and always with appropriate safeguards.

4. How We Use Your Information

We use personal data only for legitimate business purposes, including:

• Delivering our cybersecurity, compliance, and advisory services
• Responding to enquiries and requests for information
• Managing client relationships and project delivery
• Sending relevant updates, insights, or event information (with your consent)
• Meeting legal, regulatory, and contractual obligations
• Protecting our business from fraud or cyber threats

5. Lawful Basis for Processing

We rely on one or more of the following lawful bases for processing personal data:

• Performance of a contract: when we provide services to clients
• Legitimate interests: for business operations, communications, and security
• Legal obligation: where processing is required to comply with UK law
• Consent: where you have opted in to receive marketing or event updates

6. Data Sharing and Transfers

We do not sell or trade personal data.
We may share data with trusted third parties who help us deliver our services — such as cloud hosting, analytics, or IT providers — under strict confidentiality and data processing agreements.

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO).

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, or contractual requirements.
When data is no longer required, it is securely deleted or anonymised.

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Object to or restrict processing
• Withdraw consent for marketing communications
• Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been infringed

To exercise your rights, please contact us at: info@nrdpartners.co.uk

9. Security of Your Information

We implement robust technical and organisational measures to protect personal data from unauthorised access, misuse, loss, or disclosure.
This includes encryption, access control, and secure storage practices aligned to ISO 27001, NCSC CAF, and other recognised security frameworks.

10. Cookies and Website Analytics

Our website uses cookies to enhance functionality and analyse site traffic.
You can manage or disable cookies through your browser settings. For more details, please refer to our Cookie Policy.

11. Updates to This Notice

We may update this Privacy Notice periodically to reflect changes in our practices or legal requirements.
The updated version will always be available on our website, with the effective date clearly shown at the top.

12. Contact Us

If you have questions or concerns about how we handle your personal information, please contact:

Data Protection Lead
📧 info@nrdpartners.co.uk