Privacy policy
Version 1.0 · effective 03.09.2026 · UK GDPR and Data Protection Act 2018
Who we are
This policy explains how STONEBRIDGE TECH LIMITED (trading as Finelegy), company number 17360116, registered at 27 Old Gloucester St, London WC1N 3AX, processes personal data as a controller under the UK GDPR and the Data Protection Act 2018.
What data we collect
Enquiry data you submit through our form (name, e-mail, company, the practice you are interested in and your message); subsequent correspondence; and limited technical data such as the page an enquiry was sent from and the referrer. Analytics data is collected only with your consent.
Legal bases
Handling your enquiry and pre-contract communication rests on our legitimate interest in responding to you and on steps taken at your request prior to entering into a contract. Non-essential cookies rest on your consent under PECR. We do not send marketing e-mails without a separate, freely given consent.
Retention
Enquiries are retained for 24 months from the last contact and then deleted unless an engagement has started, in which case client-file retention periods apply. Consent records are retained for as long as needed to demonstrate compliance.
International transfers
Where our hosting or e-mail providers process data outside the UK, transfers rely on adequacy regulations or on the UK IDTA / Addendum to the EU SCCs, together with a transfer risk assessment.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Requests go to legal@finelegy.com and are answered within one month. You may also complain to the Information Commissioner's Office.