Osprey Approach Privacy & Cookie Policy
The protection of the personal information that you share with us is every bit as important to us as it is to you.
We appreciate that sharing your sensitive information is something that no firm will do without careful consideration and below you find our policy in regards to your data to give you that peace of mind.
Last Updated: 25/11/2025
Effective Date: 25/11/2025
1. Identity and contact details
Data Protection Officer (DPO): Chelsea Goldsby, Chelsea.goldsby@ospreyapproach.com, 03300 604 940
For any privacy-related questions, contact us at:
Email: enquiries@ospreyapproach.com
Postal Address: Osprey Approach, Suite 1, Falstaff House, Sandy’s Road, Malvern, WR14 1JJ.
2. What data we collect
–Personal information: Name, email, phone, billing details, organisation name, job title.
–Legal data: Case-related information uploaded to our platform.
–Technical data: IP address, browser type, device identifiers, usage analytics.
–Cookies & tracking: Session cookies, analytics cookies, and similar technologies.
3. Purposes and legal basis for processing
We process your data for the following purposes:
| Purpose | Legal basis |
| Provide and maintain our service | Contractual necessity |
| Billing and account management | Contractual necessity |
| Compliance with legal obligations | Legal obligation |
| Marketing communications | Consent |
| Security and fraud prevention | Legitimate interests |
4. International transfers
We do not share or transfer data outside of the UK. Data stored in our Software is safeguarded in the UK.
Marketing related details may be shared with related third-parties, but this will be stated during sign up to ensure consent.
5. Recipients of data
We share data only with:
–Service Providers: Hosting, payment processing, analytics
–Legal Authorities: When required by law
–Business Transfers: In case of merger or acquisition
We do not sell personal data.
6. Retention period
We retain personal data only as long as necessary for:
-Service delivery
-Legal and regulatory compliance
-Contractual obligations
7. Your rights
You have the following rights under GDPR/UK GDPR and CCPA:
–Access, Rectification, Erasure: Request a copy, correct, or delete your data.
–Restrict Processing: Limit how we use your data.
Object to Processing:
General objection: You may object to processing based on legitimate interests.
Direct marketing: You may opt out of marketing at any time.
Data Portability: Receive your data in a structured, machine-readable format.
–Withdraw Consent: For any processing based on consent.
8. Automated decision-making
We do not use automated decision-making or profiling that produces legal or significant effects.
9. Data security
We implement industry-standard measures:
-Encryption (in transit and at rest)
-Access controls and audit logs
-Regular security assessments
10. Complaints
If you have concerns about how we handle your personal data, please follow our Escalation & Complaints Procedure so we can resolve the issue promptly.
If you remain dissatisfied, you have the right to lodge a complaint with the UK supervisory authority for data protection matters:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
You can also find guidance on making a complaint on the ICO website.
11. Cookies
We do use Cookies to enhance your use of our marketing website and software services. These Cookies do not identify you personally or give any personal information about you. They merely recognise which web browser you are accessing our website from, how you found our site and how you navigate around pages to assist us in making this more user friendly for visitors. We do not pass this data to a third party.
In submitting any data to us and in using our services you consent to the Terms and Conditions of our Privacy Policy that is subject to change from time to time as required.
Please view our UK Cookie Policy or EU Cookie Policy for more details.
12. Children’s privacy
Our Service is not intended for individuals under 13 (or applicable age under local law).
13. Changes to this policy
We may update this Privacy Policy periodically. Updates will be posted on this page with a revised “Last Updated” date.
14. Plaid integration
Pracctice Limited is an agent of Plaid Financial Ltd., an authorised payment institution regulated by the Financial Conduct Authority under the Payment Services Regulations 2017 (Firm Reference Number: 804718). Plaid provides you with regulated account information services through Pracctice Limited as its agent.
15. Contact us
Email: enquiries@ospreyapproach.com
Address: Osprey Approach, Suite 1, Falstaff House, Sandy’s Road, Malvern, WR14 1JJ.
