Privacy Notice — Accural Limited

Effective date: 29 February 2025

We wrote this notice to be clear and straightforward. It explains what personal data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.


Who we are (data controller)

Accural Limited (Company No. 11691842)
Kemp House, 160 City Road, London, EC1V 2NX, United Kingdom

We are the controller for personal data we collect via our website and through LinkedIn Lead Gen Forms.


What data we collect

  • Contact & business details: name, job title, company, work email, phone (if provided), industry, region.
  • Enquiry details: your message, preferences, meeting availability.
  • Lead gen/platform data: information you choose to submit via LinkedIn Lead Gen Forms.
  • Client/project data (if you engage us): information needed to scope and deliver our £4K diagnostic and related services.
  • Website/cookie data: see our Cookie Policy (if applicable).

How we use your data & our lawful bases

We process personal data for the purposes below and rely on these lawful bases:

  1. Respond to your enquiry and arrange a callLegitimate interests (running and growing a B2B services firm in ways you’d reasonably expect).
  2. Provide pre-contract information, take steps at your request Contract.
  3. Direct B2B marketing about exit readiness/resourcesLegitimate interests. You can opt out at any time. In some cases we rely on Consent (e.g., where you explicitly ask for updates).
  4. Operate our site, analytics, and improve our servicesLegitimate interests.
  5. Meet legal/financial obligations (e.g., tax/audit) — Legal obligation.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects.


Where we get data

  • Directly from you (forms, emails, calls, meetings), and from LinkedIn Lead Gen Forms when you submit.
  • We may combine this with public business information (e.g., Companies House) to keep records accurate (legitimate interests).

Who we share data with

We use trusted service providers (“processors”) for CRM, email, meeting scheduling, analytics, cloud hosting, and professional advisors. They may only process data on our instructions and must protect it. We may disclose information if required by law. LinkedIn acts as a separate controller for any processing it performs on its platform.


International transfers

Some providers may be located outside the UK. Where applicable, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. You can request details of these safeguards.


How long we keep data

  • Enquiries/leads: up to 24 months from last meaningful interaction.
  • Client records & billing: typically 7 years to meet legal/financial obligations.

We delete or anonymise data when no longer needed.


Your rights

You have rights under UK GDPR, including the rights to:

  • Be informed about how we use your data (this notice).
  • Access your personal data.
  • Rectify inaccuracies.
  • Erase your data (in certain cases).
  • Restrict or object to processing (including a right to object to direct marketing at any time).
  • Data portability (to receive and reuse your data in certain cases).

We will respond within one month of verifying your request.




Marketing preferences

You can opt out of marketing at any time using the unsubscribe link in our emails or by emailing.


Security

We use appropriate technical and organisational measures to keep personal data secure. Access is limited to staff and providers with a business need.


Children

Our services and content are intended for business users and are not directed at children.


Complaints

Please contact us first so we can try to resolve your concern.
You can also complain to the Information Commissioner’s Office (ICO):


Changes to this notice

We may update this notice from time to time. We will post the latest version on this page with an updated effective date.