Website Privacy Notice and Cookie Policy
Effective date: June 2026 | Last reviewed: June 2026
Website Privacy Notice
Goldcrest Partners LLP (“Goldcrest”, “we”, “us” or “our”) respects privacy and is committed to protecting personal data. This notice explains how we collect and use personal data when you visit goldcrest-partners.com, contact us, ask for information, register interest in our services or programmes, subscribe to updates, or otherwise engage with us before or outside a client engagement. It should be read with our Terms of Use and Cookie Policy.
1. Who we are
Goldcrest Partners LLP is a limited liability partnership registered in England and Wales under number OC443981. Our registered office is 1 Cornhill, London, England, EC3V 3ND.
For data protection law, Goldcrest is the controller of personal data processed under this notice. You can contact us about privacy matters at [insert email address], by telephone on +44 (0) 20 7459 4434, or by post at our registered office.
2. What this notice covers
This notice covers personal data processed through our website, related enquiries, marketing preferences, event or programme interest, business development activity and general communications. Where Goldcrest is engaged to deliver coaching, leadership development, facilitation, profiling, assessment or related client services, additional privacy information or contractual data-processing arrangements may apply.
3. Personal data we collect
We may collect the following categories of personal data:
- identity and contact details, such as name, business email address, telephone number, job title, organisation and location;
- enquiry and relationship information, including messages you send to us, areas of interest, meeting notes, proposal discussions and communications with us;
- programme, event or marketing preferences, including whether you have asked to receive, or opted out of receiving, Goldcrest updates;
- website and technical information, such as IP address, browser type, device information, pages viewed, referring website, cookie identifiers, consent settings and analytics data;
- information from clients, colleagues, referrers, public business sources or professional networking platforms where relevant to a prospective or current business relationship; and
- limited administrative records needed for legal, accounting, security and governance purposes.
We do not ask website visitors to provide special category data, such as health, medical, ethnicity, political opinion, religious belief, trade union, biometric or sexual orientation data. Please do not include sensitive personal data in website forms or general enquiries unless we specifically ask for it. If you nevertheless provide it, we will only use it where necessary for the relevant enquiry or service and where we have a lawful basis to do so.
4. How we use personal data and our lawful basis
| Purpose | Examples of data used | Lawful basis |
| Operate, maintain and secure the website | IP address, device information, browser data, security logs, cookie-consent records | Legitimate interests in operating a secure and effective website; legal obligation where security records are needed to meet data protection duties |
| Respond to enquiries and requests | Name, contact details, organisation, message content and related communications | Legitimate interests in responding to business enquiries; steps prior to entering into a contract where relevant |
| Develop and manage business relationships, proposals and service discussions | Business contact details, role, organisation, areas of interest, correspondence and meeting notes | Legitimate interests in developing and managing relevant B2B relationships; contract where an engagement is entered into |
| Administer programme, event or service interest, including brochure requests and registration enquiries | Contact details, role, organisation, programme interest and communications | Legitimate interests; contract or pre-contract steps where the enquiry relates to a specific service or programme |
| Send Goldcrest insights, updates and invitations | Business contact details and marketing preferences | Legitimate interests for relevant B2B communications; consent where required by law. You can object or unsubscribe at any time |
| Understand website performance and improve content | Cookie identifiers, pages viewed, traffic source and aggregated analytics information | Legitimate interests and, where applicable, consent or statutory cookie rules as explained in the Cookie Policy |
| Comply with law, protect rights and maintain records | Relevant communications, transaction records, consent records and compliance information | Legal obligation; legitimate interests in protecting our rights and maintaining appropriate records |
Where we rely on legitimate interests, we do so only where we consider that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interests, including direct marketing, by contacting us.
5. Marketing communications
We may send occasional Goldcrest insights, event invitations, programme updates or service information to business contacts where we believe the communication is relevant to their role or organisation. Where the law requires consent, we will ask for it before sending marketing. Every marketing email should identify Goldcrest and provide a clear way to unsubscribe or opt out. We do not sell personal data or marketing lists.
6. Cookies and similar technologies
We use cookies and similar technologies to operate the website, remember cookie choices, protect forms and understand website usage. The Cookie Policy below explains what we use, why we use it, and how you can manage your choices.
7. Who we share personal data with
We may share personal data with:
- Goldcrest members, employees, consultants and advisers who need the information for legitimate Goldcrest business purposes;
- service providers supporting our website, hosting, IT, security, analytics, cookie-management, email, CRM and administration systems;
- professional advisers, insurers, auditors and legal advisers;
- client organisations or prospective client organisations where this is relevant to an enquiry, proposal or service delivery arrangement;
- regulators, courts, law-enforcement bodies or public authorities where required by law or necessary to protect rights; and
- third parties involved in a reorganisation, merger, transfer or sale of part of our business, subject to appropriate confidentiality protections.
Where a third party processes personal data for us, we require it to use the data only for agreed purposes and to apply appropriate security and confidentiality measures.
8. International transfers
Some of our service providers may process personal data outside the United Kingdom or European Economic Area. Where this happens, we use appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or other legally recognised transfer mechanisms.
9. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, reporting and legitimate business requirements. In general:
- website analytics and cookie data are kept for the periods shown in the Cookie Policy or in our analytics settings;
- enquiry records that do not lead to an engagement are usually kept for up to 24 months after the last substantive contact;
- client, supplier and business relationship records may be kept for up to six years after the end of the relevant relationship or last substantive interaction, unless a longer period is required or justified;
- marketing suppression records are kept as long as needed to ensure we respect opt-outs; and
- legal, compliance and accounting records are kept for the relevant statutory or limitation periods.
10. Your rights and complaints
Subject to legal conditions and exceptions, you may have the right to ask us for access to your personal data, correction of inaccurate data, deletion, restriction, portability, objection to processing, and withdrawal of consent where we rely on consent. You also have an absolute right to object to direct marketing.
You may make a data protection complaint directly to us using the contact details above. We will acknowledge a data protection complaint within 30 days and respond without undue delay after investigating it. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at www.ico.org.uk.
11. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. No website, email system or internet transmission is completely secure, so please avoid sending highly confidential or sensitive information through ordinary website forms unless we have agreed a secure method with you.
12. Children
Our website and services are directed at professional and business audiences. They are not intended for children, and we do not knowingly collect children’s personal data through the website.
13. Changes to this notice
We may update this notice from time to time. The latest version will be published on this website with the effective date shown above.
Cookie Policy
This Cookie Policy explains how Goldcrest uses cookies and similar storage or access technologies on goldcrest-partners.com. It should be read with our Privacy Notice.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. Similar technologies, such as tracking pixels, local storage, scripts and tags, can also store information on, or access information from, your device. In this policy, “cookies” includes these related technologies where the context allows.
2. How we use cookies
We use cookies for the following purposes:
- essential operation and security, including cookie-consent records, form protection and bot prevention;
- functionality, including enabling embedded video and remembering certain preferences;
- analytics and statistical reporting, including understanding visits, traffic sources and how users interact with the website; and
- compliance and audit purposes, including recording cookie choices.
We do not currently intend to use advertising or retargeting cookies. If that changes, we will update this policy and seek consent before setting any advertising cookies that require consent.
3. Consent and managing your choices
Essential cookies are needed for the website to work properly, to keep it secure, or to remember your cookie choices. These cannot usually be disabled through our cookie tool.
For non-essential cookies, we will either ask for your consent or provide a simple means to object where the law allows that approach. You can change your choices using the “Cookie settings” or equivalent link on the website. You can also block or delete cookies through your browser settings, although some website features, such as forms or embedded video, may not work properly if you do so.
4. Cookies currently used on the website
The cookies below are based on the current website configuration and cookie notice. The exact cookies may change where service providers update their technology or where Goldcrest changes the website. We will update this table where there is a material change.
| Cookie or technology | Provider | Purpose and category | Duration |
| CookieLawInfoConsent; viewed_cookie_policy; cookielawinfo-checkbox-* | CookieYes / website cookie consent tool | Records whether the cookie notice has been shown and stores your category choices. These are essential consent-management cookies; they do not themselves deliver advertising, analytics or profiling. | Usually 11 months to 1 year |
| _GRECAPTCHA | Google reCAPTCHA | Helps protect website forms against spam, abuse and automated bot activity. Security / necessary where forms are used. | Approximately 5 months 27 days |
| __cf_bm | Cloudflare | Supports bot management, security and website availability. Security / functional. | Approximately 30 minutes |
| aka_debug | Vimeo | Supports embedded video functionality where video content is used on the website. Functional. | Session |
| _ga; _ga_49ZBLQRXEC | Google Analytics | Collects information about website visits, sessions, traffic sources and usage patterns to help us understand and improve the website. Analytics / statistical. | Up to 2 years |
5. Third-party services
Some cookies are provided by third-party services used on the website, including CookieYes, Google Analytics, Google reCAPTCHA, Vimeo and Cloudflare. These services may process technical information such as IP address, device information, browser data and cookie identifiers. Where a third party processes personal data for its own purposes, its own privacy and cookie terms may also apply.
6. Browser controls
Most browsers allow you to block, restrict or delete cookies. Browser settings are separate from the website cookie tool. If you block all cookies, parts of the website may not operate as intended and your cookie preferences may not be remembered.
7. Changes to this Cookie Policy
We may update this Cookie Policy to reflect changes in law, guidance, website functionality or the cookies we use. The latest version will be published on this website with the effective date shown above.