Legal
Privacy Policy
Last updated: March 23, 2026
Thornbury is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how it is used, and what rights you have in relation to it.
By using this website or engaging our documentation services, you acknowledge the practices described in this policy. If you have any questions about how your data is handled, please contact us through the Contact page.
1. Data We Collect
Information You Provide Directly
When you complete a contact form, we collect the name, email address, and message content you submit. This information is used solely to respond to your enquiry. We do not share it with third parties for marketing purposes.
Service Engagement Data
When you engage Thornbury for financial documentation services, we may collect financial records, identification documents, and other materials necessary to prepare the requested documents. This data is handled under strict confidentiality terms established at engagement.
Cookies and Analytics Data
With your consent, we collect anonymized data about how the website is used — pages visited, time on site, and referral sources. This is collected via analytics cookies and is used only to improve the site. Consent is managed through the cookie banner and the Cookie Policy page.
Legal Basis for Processing
We process personal data on the basis of: (a) your consent, where you have given it; (b) contractual necessity, where data is required to deliver a service; (c) legitimate interest, in the operation and improvement of our website and services; and (d) legal obligation, where applicable regulations require us to retain certain records.
2. How We Use Your Data
Responding to Enquiries
Contact form submissions are used exclusively to reply to the person who submitted them. We do not retain contact form data beyond the period reasonably necessary to respond and follow up.
Service Delivery
Financial and personal data provided during a service engagement is used only to prepare the requested documentation. This data is not shared with any third party unless legally required or expressly instructed by the client.
Website Analytics
Analytics data is used to understand how users navigate the website and to identify areas for improvement. All analytics are handled in anonymized, aggregated form. We do not build individual user profiles from analytics data.
Third-Party Sharing
We do not sell personal data. We do not share client data with advertisers. Analytics platforms may receive anonymized usage data if you have consented to analytics cookies. We do not engage in data brokering or behavioral profiling for commercial purposes.
3. Data Protection Measures
Security Practices
We take reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or loss. Access to sensitive client data is limited to personnel directly involved in service delivery.
Data Retention
Personal data collected through contact forms is retained only as long as necessary to resolve the correspondence. Service engagement records are retained for the period required by applicable record-keeping regulations, after which they are securely deleted or destroyed.
Breach Notification
In the unlikely event of a data breach that poses a risk to your rights or freedoms, we will notify the appropriate supervisory authority and affected individuals as required by applicable data protection law.
4. Your Rights
Right of Access
You may request a copy of the personal data we hold about you at any time. We will respond within the timeframe required by applicable law.
Right to Rectification
If personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated.
Right to Erasure
In many circumstances, you have the right to request that personal data about you be deleted. Requests are reviewed on a case-by-case basis against legal retention requirements.
Right to Object
Where processing is based on legitimate interest, you have the right to object. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interest.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may: Avoid filling out contact forms, account registrations, or any data-submitting features. Disable cookies through your browser settings (see our Cookie Policy for more details). Contact us directly to request the deletion of any previously shared personal data. We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.