PRIVACY NOTICE
This notice explains how Solomon Apex Group Ltd ("SAG", "we", "us") uses personal data about the people we work with or might work with.
Solomon Apex Group Ltd is the controller of the personal data described here. We are a UK business advisory consultancy.
Clients; directors, staff and advisers of client companies; prospective clients; visitors to solomonapexgroup.com (including people who complete the Enterprise Value Scorecard); and referral partners and their contacts.
| Who | What we use | Where it comes from |
|---|---|---|
| Clients and client staff | Name, role, work contact details; what you tell us in meetings and interviews (notes; calls may be recorded and transcribed, with notice to participants); business documents that contain personal data; billing and payment details | You, your colleagues and your company's advisers |
| Prospects | Name, role, work contact details; company details; public information about the business and its officers; our notes of conversations | Companies House; company websites; LinkedIn; commercial business-to-business data providers; referrals; you |
| Website and Scorecard users | What you enter in forms and the Scorecard; technical and cookie data (see section 9) | You and your device |
| Referral partners | Name, firm, role, contact details; referral records and fee payments | You and your firm |
If you are a prospect. If we obtained your details from someone other than you, we will tell you who we are and where they came from when we first contact you, and within one month at the latest. If we download Companies House records in bulk and do not contact you within 30 days, we delete them.
We do not ask for special category data, such as health information. If someone shares it with us unexpectedly, we do not keep it in our records.
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Delivering our services and managing the engagement, including billing | Contract with our client. For client staff and advisers, legitimate interests in delivering the work the client has asked for |
| Finding and contacting prospective clients and referral partners in their business role | Legitimate interests (see below) |
| Running our website and the Scorecard, and replying to enquiries | Legitimate interests; contract where you ask us to provide something |
| Recording and transcribing calls and meetings, with notice to participants at the start | Legitimate interests in keeping an accurate record of what was said. You can ask us not to record |
| Keeping accounting and tax records, preventing fraud and meeting other legal duties | Legal obligation |
| Non-essential cookies; email marketing to sole traders and ordinary partnerships | Consent, which you can withdraw at any time |
Our legitimate interests. We have an interest in running and growing a business advisory practice and in contacting businesses that may benefit from it. We use business contact details and business information, much of which is already public. We tell you who we are and where we obtained your details at first contact, we make it easy to object, and we stop when you ask. You can ask us for more detail.
Business emails and calls. We send unsolicited business emails only to people at companies and limited liability partnerships. We email sole traders and ordinary partnerships only with their consent, or where the "soft opt-in" applies. We screen phone numbers against the Telephone Preference Service and the Corporate Telephone Preference Service before any marketing call. Every message says who we are and how to opt out. If you object, we keep a minimal record so that we do not contact you again.
We use AI-assisted tools, on SAG's own systems and accounts, to help analyse information, research and draft. A person at SAG reviews the outputs, and a named SAG person approves every report before it is released. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. The providers of these tools act as our processors under contract.
We share personal data only as needed, with the ordinary systems and processors required to run a consultancy of this kind. These include providers of customer relationship management, payment processing, email and communications, document storage and backup, website hosting and security, and other similar support services.
We also share personal data with our professional advisers and insurers; with FCA-authorised firms, only when a client instructs us to make an introduction; and with the police, regulators, courts or other authorities where the law requires it.
Service providers act as our processors under written contracts. Some recipients, such as payment processors, professional networking platforms and our professional advisers, also act as independent controllers for their own purposes. We do not sell personal data.
Our service providers may store and process personal data outside the UK. Where they do, we use appropriate safeguards: the UK's adequacy regulations where they apply (including the UK Extension to the EU–US Data Privacy Framework), or the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
| Data | How long |
|---|---|
| Client source and working documents | 90 days after the final report, then deleted or returned, unless the law requires us to keep them |
| Engagement file (agreement, final reports, key working papers) | 6 years after the engagement ends |
| Finance and tax records | 6 years after the end of the financial year they relate to |
| Prospects, website enquiries and Scorecard users who do not become clients | 2 years after our last contact. Companies House records downloaded in bulk and not contacted within 30 days are deleted |
| "Do not contact" record | For as long as needed to respect your objection |
Our cookie notice at solomonapexgroup.com/cookies explains the cookies and similar technologies we use. We use non-essential cookies only with your consent, and you can change your choice at any time.
You have the right to: be informed; access your data; have it corrected; have it erased; restrict its use; data portability; object to our use of it, including an absolute right to object to direct marketing; withdraw consent at any time (this does not affect earlier use); and rights in relation to automated decisions. Some rights apply only in certain circumstances. We normally reply within one month. Contact us using the details in section 1.
Please tell us first if you are unhappy with how we use your data. We will acknowledge your complaint within 30 days and tell you the outcome. You also have the right to complain to the Information Commission at ico.org.uk, by calling 0303 123 1113, or in writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
We will update this notice when our use of personal data changes, and tell clients of any significant change.
Version 1.0, 5 November 2026. This notice applies from the date it is published at solomonapexgroup.com/privacy.