Privacy Policy

Greywing is a specialist protective and corporate intelligence firm and is the controller of personal information collected through this website.

Enquiry information you choose to provide: name, organisation, role, work email address, optional telephone number, area of interest, and a short description of your requirement.

Limited technical information generated when you visit the site, such as IP address, browser type, and pages viewed. This is used for security and to keep the site working correctly.

We ask that initial enquiries contain only the detail necessary for us to understand whether we can assist. Sensitive detail should be discussed once secure contact is established.

Enquiry information is used solely to respond to your enquiry, to assess whether an engagement is appropriate, and to carry out our own conflict and acceptance checks.

We do not add enquirers to marketing lists, we do not sell personal information, and we do not share it with third parties for their own purposes.

We rely on our legitimate interests in responding to business enquiries and operating a secure website, on the steps necessary to enter into a contract where an engagement is being discussed, and on legal obligation where retention or disclosure is required by law.

This website uses only the cookies and local storage strictly necessary for the site to function. We do not use advertising cookies or third-party tracking pixels.

We use a small number of service providers for hosting, email, and secure communications. They act on our instructions and are bound by confidentiality and data protection obligations.

We may disclose information where required by law, court order, or regulatory obligation, or where necessary to protect the safety of a person at risk.

Where information is transferred outside your jurisdiction, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

Access to enquiry information is restricted to the people who need it. Client material is handled under stricter arrangements agreed at the outset of an engagement, with access limited to the analysts working on that matter.

Enquiries that do not result in an engagement are retained only as long as necessary for our records and legitimate business purposes, and are then securely deleted. Engagement records are retained for the period agreed with the client and any period required by law.

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of the personal information you have provided, object to processing based on legitimate interests, and request a copy of your information in a portable format.

Some rights are qualified where information forms part of a confidential client engagement or where retention is required by law. We will explain the position if that applies.

We may update this policy from time to time. The version published here, with the date shown above, is the version in force.