Data Protection Policy

Emerald Global Advisory

Last Updated: 13 July 2026

1. Purpose of Policy

This Data Protection Policy explains how Emerald Global Advisory (“we”, “us”, “our”, or the “Company”) collects, uses, stores, and protects personal data.

This policy applies to all personal data processed by Emerald Global Advisory, including information relating to clients, prospective clients, partners, suppliers, contractors, employees, and website users.

We are committed to ensuring that personal data is handled responsibly, securely, and in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

All employees, contractors, and individuals working on behalf of Emerald Global Advisory are expected to comply with this policy and follow appropriate data protection practices.

2. Definitions

Personal Data means any information relating to an identified or identifiable individual.

Processing means any activity involving personal data, including collecting, storing, using, sharing, updating, or deleting information.

Data Subject means the individual whose personal data is being processed.

Controller means the organisation that determines how and why personal data is processed.

Processor means an organisation that processes personal data on behalf of the controller.

3. Our Commitment to Data Protection Principles

Emerald Global Advisory is committed to ensuring that personal data is:

• Processed lawfully, fairly, and transparently.
• Collected only for legitimate and clearly defined purposes.
• Limited to information necessary for the purpose it was collected.
• Accurate and kept up to date where required.
• Retained only for as long as necessary.
• Protected through appropriate technical and organisational security measures.
• Processed in a way that respects individual rights.

4. How We Process Personal Data

We may collect and process personal data for purposes including:

• Providing advisory and consulting services.
• Managing client relationships.
• Responding to enquiries.
• Communicating with clients, partners, and stakeholders.
• Managing business operations.
• Improving our website, services, and user experience.
• Meeting legal and regulatory obligations.

5. Lawful Basis for Processing

We process personal data based on one or more of the following legal grounds:

Consent — Where individuals have provided permission for their data to be used for a specific purpose.

Contractual Necessity — Where processing is required to provide services or fulfil contractual obligations.

Legal Obligations — Where processing is required to comply with applicable laws and regulations.

Legitimate Interests — Where processing is necessary for legitimate business purposes while respecting individual rights.

6. Transparency and Privacy Information

When collecting personal data, Emerald Global Advisory will provide appropriate information explaining:

• Who we are.
• Why we collect personal data.
• How we use personal data.
• The legal basis for processing.
• How long information is retained.
• Who information may be shared with.
• Individual rights relating to personal data.

This information may be provided through our Privacy Notice, Website Privacy Policy, and Cookie Policy.

7. Data Minimisation

Emerald Global Advisory only collects personal data that is necessary and relevant for the intended purpose.

Employees and contractors must not collect, access, or process personal information unless there is a legitimate business requirement.

Personal data that is no longer required will be securely deleted or anonymised.

8. Accuracy and Storage of Data

We take reasonable steps to ensure personal data is accurate and updated when necessary.

Personal data is retained only for as long as required for business, legal, or regulatory purposes.

9. Data Security

Emerald Global Advisory maintains appropriate technical and organisational measures to protect personal data against:

• Unauthorised access.
• Loss or misuse.
• Accidental disclosure.
• Alteration or destruction.

Security measures may include access controls, secure storage systems, confidentiality obligations, and appropriate technology safeguards.

10. Data Breaches

Any suspected personal data breach must be reported immediately.

Where required by law, Emerald Global Advisory will assess the breach and notify the relevant authorities and affected individuals within the required timeframe.

11. International Transfers

Where personal data is transferred outside the UK or applicable jurisdictions, Emerald Global Advisory will ensure appropriate safeguards are implemented to protect personal data.

12. Data Subject Rights

Individuals have rights regarding their personal data, including:

• The right to access their personal information.
• The right to request correction of inaccurate information.
• The right to request deletion where applicable.
• The right to restrict or object to processing.
• The right to withdraw consent.
• The right to make a complaint to the relevant data protection authority.

Requests relating to personal data should be submitted to:
Email: info@emeraldglobaladvisory.com

13. Accountability and Governance

Emerald Global Advisory is responsible for ensuring compliance with data protection obligations.

We maintain appropriate policies, procedures, and records to demonstrate compliance and regularly review our data protection practices.

14. Third-Party Sharing

Personal data may only be shared with:

• Approved service providers.
• Trusted partners where necessary.
• Organisations required for legal or operational purposes.

Where third parties process personal data on our behalf, appropriate agreements and safeguards will be maintained.

15. Training and Awareness

Emerald Global Advisory ensures that individuals handling personal data understand their responsibilities and follow appropriate data protection practices.

16. Data Protection Impact Assessments (DPIA)

Where new activities or technologies may create a high risk to individuals’ personal data, Emerald Global Advisory will assess the risks and implement appropriate safeguards.

17. Direct Marketing

Where we send marketing communications, we ensure compliance with applicable privacy laws.

Individuals may unsubscribe or withdraw marketing consent at any time.

18. Updates to This Policy

This Data Protection Policy may be updated periodically to reflect changes in legal requirements, business practices, or technology.

Any updates will be published with the revised date.

Contact Information

Emerald Global Advisory
Website: https://emeraldglobaladvisory.com/
Email: info@emeraldglobaladvisory.com