Company Information and Privacy Notice

1. About this notice

This notice explains how White Stag Advisory Limited collects and uses personal data through this website, in particular through its enquiry form. It applies to visitors to the website and to individuals who submit an enquiry. Clients of the White Stag Research platform receive separate information about the processing carried out in connection with the platform.

2. Who we are

White Stag Advisory Limited (“White Stag”, “we”, “us”) is the controller of the personal data described in this notice. White Stag Research is a trading name of White Stag Advisory Limited, a private limited company registered in England and Wales under number 14995006, with its registered office at 58 505 Butlers Wharf Business Centre, London SE1 2NN.

For any question about this notice or about your personal data, contact us at contact [at] wstag.co. We have not appointed a data protection officer; questions are handled directly by the company’s management.

3. Personal data we collect

Enquiries. When you submit the enquiry form, we collect the type of enquiry, your name, the name of your organisation, your professional email address, and, if you choose to provide them, your role and the content of your message. The date and time of submission are recorded with the enquiry.

Correspondence. If we reply to your enquiry, we keep the correspondence that follows, including the information it contains.

Technical data. When the website is visited, our hosting provider automatically records, for each request, the date and time, the IP address, the page requested, the referring page, and the type of browser and operating system, in order to deliver and secure the website. This website does not use cookies or analytics tools.

We do not seek to collect special categories of personal data, such as data about health or political opinions, and we ask you not to include any in your message.

4. How we use it and on what legal basis

• To respond to your enquiry and follow it up, including any discussion about access to our research. Legal basis: our legitimate interest in responding to enquiries from professional investors and in developing our business.
• To keep a record of enquiries and of our exchanges, so that we can demonstrate how each enquiry was handled. Legal basis: our legitimate interest in maintaining accurate and auditable business records.
• To operate the website, protect it against misuse, and investigate security incidents. Legal basis: our legitimate interest in the security of our systems.
• To comply with our legal obligations and to establish, exercise, or defend legal claims. Legal basis: compliance with a legal obligation, or our legitimate interest in protecting our rights.

We have weighed these interests against your rights and consider that this processing is limited to what a professional who contacts us would reasonably expect. We do not use your personal data for marketing, we do not sell it, and we do not use it to make decisions about you by automated means, including profiling.

5. Whether you must provide it

Name, organisation, and professional email address are needed to respond to your enquiry, and the form cannot be sent without them. Role and message are optional. There is no statutory or contractual requirement to provide any of this information. The form accepts professional email addresses only, as our services are reserved for professional investors.

6. Who we share it with

We share personal data only with:

• our service providers, who process it on our behalf and on our instructions only: Amazon Web Services, for the hosting of the website and the storage of enquiries, and Microsoft, for our email services;
• our professional advisers, such as lawyers and accountants, where necessary and under a duty of confidentiality;
• public authorities, regulators, or courts, where the law requires us to do so;
• a purchaser or successor, should our business be sold or reorganised, under equivalent protection.

We do not share it with anyone for their own purposes.

7. Where it is stored

Enquiries are stored by Amazon Web Services in the United Kingdom (London). Our email service, provided by Microsoft, is also hosted in the United Kingdom.

8. How long we keep it

• Enquiry records: 24 months from the date of receipt, after which they are deleted.
• Correspondence with you: for as long as necessary for our relationship and our records, and reviewed periodically.
• Technical data: retained by our hosting provider for as long as the website is hosted on its service. We consult it only where needed to resolve technical or security issues.

We may keep information for longer where the law requires it or where it is needed in connection with a legal claim.

9. How we protect it

We apply technical and organisational measures appropriate to the risk, including encrypted connections between your browser and our services, and access restricted to authorised personnel.

10. Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• have inaccurate personal data corrected;
• have your personal data erased;
• restrict how we use it;
• object to our use of it where we rely on our legitimate interests;
• receive the personal data you provided in a portable format, where applicable.

To exercise any of these rights, write to contact [at] wstag.co. We may ask you to confirm your identity. We will respond within one month; this may be extended by up to two further months for complex or numerous requests, in which case we will tell you why. Exercising your rights is free of charge. Some rights are subject to conditions and exceptions set out in the law.

11. Complaints

If you are concerned about how we handle your personal data, you can complain to us at contact [at] wstag.co. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you informed of progress, and tell you the outcome.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator: ico.org.uk, telephone 0303 123 1113.

12. Links to other websites

This website may contain links to websites operated by others. We are not responsible for their content or for how they handle personal data.

13. Changes to this notice

We will update this notice when our use of personal data changes. The date at the top shows when it was last updated.