Privacy Policy

Updated 04.09.25

1. Introduction

This Privacy Policy sets out how d-three Ltd (“d-three”, “we”, “our”, or “us”) collects, uses, stores, and protects personal data in connection with the provision of our consultancy services and through your use of our website. We are committed to safeguarding the privacy and confidentiality of personal data and to complying with applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.

2. Scope of this Policy

This Policy applies to visitors to our website, to prospective clients and partners, to clients and their representatives with whom we engage in the delivery of services, and to any individual who communicates with us in relation to our consultancy. It does not extend to third-party websites or services that may be linked to from our website, and we encourage you to review the privacy policies of those providers.

3. Information We Collect

We collect personal data in a number of ways. This includes information you provide directly, such as your name, company, job title, and contact details when you make an enquiry, request a consultation, or enter into a contract with us. We may also collect technical information automatically through your use of our website, such as IP address, browser type, and site usage data. In some cases, and where lawful, we may receive data from third parties, such as business partners or public sources, to support client engagements.

4. How We Use Personal Data

Personal data is processed for defined purposes, including responding to enquiries, managing contractual relationships, delivering consultancy services, providing project updates, and communicating with clients and stakeholders. We also use data to maintain and secure our IT systems, to meet legal and regulatory obligations, and to pursue our legitimate business interests such as improving our services, enhancing client relationships, and supporting business development.

5. Legal Basis for Processing

We process personal data on several legal bases. This includes processing necessary to perform a contract or to take steps at your request prior to entering into a contract, processing required to comply with legal obligations, and processing carried out in pursuit of our legitimate interests, such as service delivery, system security, and business improvement. Where consent is required, such as for certain marketing activities, we will obtain it before processing.

6. Sharing and Disclosure

We may share personal data with trusted third-party service providers who support our operations, including IT hosting providers, analytics partners, and professional advisers. All such parties are contractually bound to handle data securely and confidentially. We may also disclose personal data where required to comply with legal or regulatory obligations, or where necessary to protect our rights or those of our clients. If personal data is transferred outside the United Kingdom, appropriate safeguards, such as standard contractual clauses, will be applied.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by law. Retention periods vary depending on the nature of the engagement, contractual obligations, and statutory requirements. Once data is no longer required, it will be securely deleted or anonymised.

8. Security

We employ appropriate technical and organisational measures to safeguard personal data from unauthorised access, disclosure, alteration, or destruction. These measures include secure servers, encryption, and access controls. While we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Your Rights

You may have rights under applicable data protection law, including the right to access your personal data, to request rectification or erasure, to restrict or object to processing, and to request portability of your data. Where processing is based on consent, you may withdraw that consent at any time. To exercise your rights, please contact us at support@d-three.com.

10. Updates to this Policy

We may amend this Privacy Policy from time to time in response to legal, regulatory, or operational changes. Updates will be published on our website with a revised “Updated” date, and we encourage you to review this Policy periodically.

11. Contact Information