How website enquiries are handled.

What is collected

Name, work email, optional organisation, enquiry type and the context you choose to provide. The website and its security service also process necessary technical information such as IP address, request details and security-verification results. The public form should not be used for classified, security-sensitive, special-category or unnecessary third-party information.

Why it is used and the lawful basis

Enquiry information is used to respond, assess whether Legatus is relevant to the requirement and manage the resulting business discussion. Legatus relies on legitimate interests in responding to proportionate business enquiries and operating a secure website. Where you ask Legatus to take steps before entering into a contract, processing may also be necessary for those pre-contract steps. Enquiry information is not added to a marketing list without a separate lawful basis.

Who receives it

Submitted details are delivered to Legatus by email. Cloudflare processes website hosting, security verification and email-delivery data. The mailbox provider processes the delivered message. Professional advisers, insurers, regulators or public authorities receive information only where necessary for a legitimate business purpose or legal obligation. Legatus does not sell enquiry information.

International processing

Cloud and email providers may process information outside the United Kingdom. Where this occurs, Legatus requires the provider to use an applicable UK adequacy decision or approved contractual safeguards. The website does not create a separate application-database copy of the enquiry.

How long it is kept

An enquiry that does not progress is deleted from the business mailbox within 12 months of the last meaningful contact. If a client or supplier relationship follows, relevant correspondence becomes part of the applicable business record and is retained only for the contractual, legal, tax, insurance or dispute period that applies to that record. Infrastructure and security providers retain technical records under their own controlled retention schedules.

Cookies and local storage

The website does not currently load advertising or optional behavioural analytics. Cloudflare Turnstile may use strictly necessary security state when a challenge is required. If a future service introduces non-essential storage, Legatus will assess consent and update this notice before loading it.

What not to submit

Do not include classified, security-sensitive, special-category or unnecessary third-party personal information in the website form.

Your rights

Depending on the circumstances, you may ask for access, correction, erasure, restriction or portability of your information. You may object to processing based on legitimate interests. Legatus will consider the request against the purpose and any legal obligation that requires information to be retained.

Your right to object: you may object at any time to processing based on legitimate interests by emailing info@legatusgroup.co.uk and explaining your circumstances.

Complaints

Email info@legatusgroup.co.uk with “Data protection complaint” in the subject. Legatus will acknowledge the complaint within 30 days and explain the outcome after investigation. You may also complain to the Information Commissioner’s Office.

Contacting Legatus

For an ordinary business enquiry, use the website enquiry form or email address above. This notice applies to information collected through the website and any direct follow-up arising from that enquiry.