Effective 18 September 2026
Privacy and Data Retention Notice
This notice explains how information is handled during enquiries and accepted assignments.
Information we handle
Depending on the request, we may handle client identity, contact and authority information; communications; contracts and payment records; client-supplied documents; public or lawfully accessible records; interview notes; field observations; photographs or video; source details; and security logs. We collect information only where it relates to a defined, lawful purpose.
Why we use information
We use information to screen enquiries, verify identity and authority, prevent conflicts and misuse, quote and contract, plan and perform accepted work, report findings, protect people and systems, process payment, and meet legal or evidentiary obligations.
Sources and sharing
Information may come from clients, authorized representatives, public sources, lawful record providers, consensual interviews, field observations, advocates, corporate personnel and vetted service providers. Access is limited to those who need it. Information may be shared with an authorized client recipient, confidential provider, professional adviser, insurer, court, regulator or law-enforcement authority where required or lawfully appropriate. We do not sell case data.
Security
We use case identifiers, access controls, secure transfer where available, separated case folders, delivery records and confidentiality obligations. No system is completely secure. Suspected loss or unauthorized access is escalated for containment and any legally required notification.
Retention
- Rejected or incomplete enquiries are normally deleted or anonymized within 90 days.
- Active case material is retained only while needed to perform, supervise and close the assignment.
- Final reports and operational evidence are normally retained for 12 months after closure, unless earlier lawful deletion is requested or a dispute, legal hold, safety issue or legal duty requires longer retention.
- Temporary working copies are ordinarily deleted within 90 days after closure.
- Contracts, invoices and tax records may be retained for up to eight financial years or longer where required by law.
- Security and access records are normally retained for 12 months.
Your choices and requests
You may ask about our handling of your personal data, request correction of inaccurate client data, withdraw consent where consent applies, or request deletion where retention is no longer necessary. We may need to verify identity. Some information may be withheld or retained to protect another person, a confidential source, safety, an investigation, legal rights or legal duties.
Contact
Use the confidential enquiry channel on the website and state that your message concerns privacy. Do not send unnecessary identity documents until requested.