Privacy Policy
Last updated: August 2026
1. Who we are
Crown Bridge Consulting is a private advisory and coordination practice. In this policy, “Crown Bridge”, “we”, “us” and “our” mean:
Crown Bridge Consulting Ltd, a company registered in England and Wales under company number 17241687, whose registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For data-protection purposes, we are generally the controller of the personal information described in this policy.
Contact:
- Privacy email: privacy@crownbridgeconsulting.com
- ICO registration reference: ZC223896
- General email: hello@crownbridgeconsulting.com
- Postal address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
2. Scope of this policy
This policy explains how we collect, use, share, retain and protect personal information when you:
- visit or interact with our website;
- make an enquiry or request a private consultation;
- become, represent or are connected with a client;
- receive or participate in our advisory, CrownCare™, academic, family, relocation, immigration coordination, logistics or asset-coordination services;
- communicate or work with us as a professional adviser, supplier, contractor, partner or referrer; or
- otherwise provide information to us.
Where a separate engagement letter, service schedule or just-in-time privacy notice applies, it should be read with this policy.
3. Personal information we collect
Depending on the relationship and service, we may collect:
Identity and contact information
Names, titles, dates of birth, contact details, addresses, nationality, citizenship, passport or identification details, signatures and information about parents, guardians, dependants, family members, household staff, representatives and advisers.
Enquiry and client information
Information supplied through consultation forms, correspondence, calls and meetings; the nature of your objectives; service history; preferences; instructions; contractual records; feedback; complaints and records of our work.
Academic and CrownCare™ information
School, university and course information; applications; academic history and progress; reports; attendance or pastoral information; goals; mentoring notes; family reporting preferences; and information required to coordinate academic support or student welfare.
Relocation, travel and immigration-coordination information
Travel plans; addresses; accommodation preferences; family circumstances; immigration status and history; visa or application documents; right-to-work or right-to-study information; and information required to coordinate with appropriately qualified immigration advisers, lawyers, educational institutions or other providers.
Logistics and asset information
Details of property, vehicles, belongings, valuables or other assets; collection and delivery details; inventories; access arrangements; insurance information; and security or handling requirements.
Financial and transaction information
Billing details, invoices, payment status, fee arrangements, source-of-funds information where reasonably required, and limited payment information supplied by our payment provider. We do not intend to store complete payment-card details.
Technical and website information
Internet Protocol address, device and browser information, website activity, referral source, cookie choices, security logs and similar technical information.
Communications and professional information
Emails, messages, call notes, meeting records, job title, organisation, professional relationship and due-diligence information concerning partners, suppliers and referrers.
Special-category and sensitive information
Where genuinely necessary for a service, we may receive information about health, disability, dietary requirements, religion, ethnicity or other sensitive circumstances. We may also receive criminal-offence information where lawful and relevant, for example in connection with safeguarding, security, travel or immigration coordination.
We will seek to minimise this information and apply an additional lawful condition where the law requires one.
4. Information about children and young people
Some academic, mentoring, family and CrownCare™ services may concern a child or young person.
We will normally contract with, take instructions from and communicate through a parent, guardian or other properly authorised adult. That adult must have authority to provide the relevant information and instruct us in relation to the child.
We may communicate directly with a young person where this is appropriate to the service, their age and understanding, the authority given, safeguarding requirements and applicable law. We will use child-friendly explanations where appropriate and will not knowingly use a child's information for behavioural advertising.
If you believe a child has supplied information to us without proper authority, contact us promptly.
5. How we obtain personal information
We may obtain information:
- directly from you, including through forms, meetings, calls and correspondence;
- from a parent, guardian, family member, employer, sponsor, representative or another person involved in the instruction;
- from professional advisers, educational institutions, accommodation providers, logistics providers, relocation providers, travel providers, insurers, authorities and other organisations involved in the requested service;
- from referral partners and strategic partners;
- from public sources, professional directories, official registers and reputable due-diligence sources;
- through website technologies and our IT, communications, scheduling, client-management and payment systems; and
- from another person where you are named in or relevant to an instruction.
If you provide information about another person, you should ensure that you are authorised to do so and, where appropriate, make this policy available to them.
6. Why we use information and our lawful bases
We use personal information only where we have a lawful basis. The main purposes and bases are:
| Purpose | Main lawful basis |
|---|---|
| Responding to enquiries and arranging consultations | Steps requested before entering a contract; legitimate interests in operating and developing our practice |
| Assessing instructions, conflicts, suitability and risk | Legitimate interests; legal obligation where applicable |
| Preparing proposals, engagement letters and service plans | Steps requested before entering a contract; contract |
| Delivering and administering services | Contract; legitimate interests where the relevant person is connected with, but not party to, the contract |
| Coordinating with schools, universities, advisers, suppliers and strategic partners | Contract; legitimate interests; consent where appropriate |
| Billing, payments, accounting and debt recovery | Contract; legal obligation; legitimate interests |
| Safeguarding, welfare, security and emergency response | Legitimate interests; vital interests in an emergency; legal obligation where applicable |
| Maintaining client and family reporting records | Contract; legitimate interests in accurate service delivery and accountability |
| Improving services, training, quality assurance and internal administration | Legitimate interests |
| Website operation, security and fraud prevention | Legitimate interests; legal obligation where applicable |
| Non-essential cookies and similar technologies | Consent |
| Direct marketing to individuals | Consent where required; otherwise legitimate interests, subject to applicable electronic-marketing rules and the right to object |
| Establishing, exercising or defending legal claims | Legitimate interests; applicable additional condition for special-category information |
| Compliance with tax, corporate, regulatory and lawful-authority requirements | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we consider the need for the processing, its likely impact and the individual's rights. You may ask us for further information about that assessment.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect prior lawful processing, and we may sometimes continue processing on another lawful basis.
7. If information is not provided
Some information is necessary to assess an instruction, enter into a contract, coordinate a service, protect a client or comply with law. If it is not provided, we may be unable to proceed or may need to suspend or end the relevant service.
8. How we share information
We may share information, on a need-to-know basis, with:
- schools, universities, tutors, mentors and educational providers;
- solicitors, barristers, regulated immigration advisers, tax advisers, accountants, insurers and other professional advisers;
- relocation, accommodation, property, travel, transport, storage, logistics, security, concierge and lifestyle providers;
- medical or welfare professionals where authorised or necessary to protect vital interests;
- parents, guardians, sponsors, family offices, employers or representatives in accordance with the engagement and authority given;
- strategic partners, subcontractors and independent specialists supporting an instruction;
- website hosts, cloud, communications, scheduling, document, payment, accounting and client-management providers;
- banks, payment providers, auditors, insurers and debt-recovery advisers;
- police, courts, regulators, tax authorities and public bodies where disclosure is required or lawful;
- a prospective buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality; and
- any other recipient authorised by you or described at the point of collection.
Our coordination of a third party does not necessarily mean that the third party acts as our processor. Many professional advisers and providers act as independent controllers and apply their own privacy notices.
We do not sell personal information.
9. International transfers
Our clients, families, institutions and providers may be located outside the United Kingdom. A service may therefore require personal information to be accessed from or transferred to another country.
Where UK data-protection law requires safeguards, we will use an appropriate mechanism, such as:
- UK adequacy regulations;
- the UK International Data Transfer Agreement or UK Addendum to approved contractual clauses;
- another legally recognised safeguard; or
- a permitted exception for a specific situation.
Some countries may not provide the same level of legal protection as the UK. You may contact us for further information about safeguards relevant to your information.
10. Retention
We retain information only for as long as reasonably necessary for the purpose for which it was collected, including service continuity, safeguarding, legal, accounting, tax, insurance and dispute purposes.
As a general framework:
- unsuccessful or unprogressed enquiries: normally up to 24 months after the last meaningful contact;
- client and engagement records: normally 7 years after the end of the engagement;
- financial and tax records: normally 6 years after the relevant accounting period, or longer where law requires;
- safeguarding or child-welfare records: for a period determined by the nature of the record, professional guidance, legal risk and the interests of the child;
- marketing preferences and suppression records: for as long as needed to respect the preference;
- cookie and technical records: according to the cookie table and system-security requirements.
We may retain information for longer where litigation is anticipated or ongoing, a regulator or insurer requires it, there is a safeguarding reason, or another legal requirement applies. We may securely anonymise information so it no longer identifies an individual.
11. Security and confidentiality
We use proportionate organisational and technical measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, authentication, encryption where appropriate, secure providers, confidentiality duties, staff or contractor guidance, backups and incident procedures.
No internet or storage system can be guaranteed completely secure. Please avoid sending unusually sensitive documents through an insecure channel and ask us about an appropriate transfer method.
12. Your rights
Depending on the circumstances, you may have the right to:
- be informed about our use of your information;
- request access to it;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information;
- ask us to restrict its use;
- object to processing based on legitimate interests or to direct marketing;
- receive certain information in a portable format;
- withdraw consent; and
- not be subject to a decision based solely on automated processing where it has a legal or similarly significant effect, subject to legal exceptions.
These rights are not absolute. We may need to verify identity and authority, and legal exemptions may apply. We normally respond within one month, although the law permits an extension for complex or multiple requests.
To exercise a right, contact privacy@crownbridgeconsulting.com.
13. Marketing
You may opt out of marketing at any time by using an unsubscribe facility or contacting us. We may retain a minimal suppression record so that we continue to respect your choice.
Operational communications about an enquiry, consultation or service are not marketing.
14. Automated decision-making
We do not currently intend to make decisions about individuals using solely automated processing where the decision produces legal or similarly significant effects. If that changes, we will provide the information and safeguards required by law.
15. Complaints
Please contact us first so that we can investigate:
privacy@crownbridgeconsulting.com or 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
You also have the right to complain to the Information Commissioner's Office:
- Website: https://ico.org.uk/make-a-complaint/
- Telephone: 0303 123 1113
If you are outside the UK, you may also have the right to contact the relevant local data-protection authority.
16. Changes to this policy
We may update this policy to reflect changes in our services, technology or legal duties. The current version will be published on our website with its revision date. Where a change materially affects how we use existing information, we will take reasonable steps to bring it to the attention of affected individuals.