Privacy Notice

Allington Advisors is a trading name of Corpra Capital Limited (company number 15398812). Corpra Capital Limited is the controller of the personal information described in this notice. Our website is https://www.allingtonadvisors.com/, and the advisory business operates from London, United Kingdom. For privacy questions, requests or complaints, contact info@allingtonadvisors.com. This notice covers visitors to the website and people who contact us about our services. It does not replace any separate notice or agreement provided during a client engagement.

If you use our contact form or email us, we receive the details you provide: your name, email address, optional company and selected services, message, and any other information you choose to include. Please avoid sending sensitive personal information through the form unless we have agreed an appropriate way to receive it. The form sends an acknowledgement email to the address entered.

When you visit the website, hosting and security services may process ordinary technical information such as IP address, browser and device details, pages requested, timestamps, and diagnostic or security logs. The contact endpoint temporarily uses an IP address to limit repeated submissions. If the live Insights feed is temporarily unavailable, the website uses a validated article list included in its build; it does not store this list on your device. Accessing public Resources may send technical request information to Supabase. We do not currently run Google Analytics or advertising pixels.

We use enquiry details to answer you, arrange a conversation, and, where requested, take steps before a possible engagement. Our lawful bases are steps taken at your request before entering a contract where applicable and our legitimate interests in responding to genuine business enquiries and developing client relationships. We use technical information to deliver, secure, troubleshoot and maintain the website, prevent abuse, and maintain reliable service records, based on our legitimate interests in operating a safe and effective business website. We may also process information where necessary to meet legal obligations or to establish, exercise or defend legal claims.

We do not sell personal information. Contact-form details are not added to an unrelated marketing list merely because you submit an enquiry. We do not make solely automated decisions about visitors that produce legal or similarly significant effects. If optional analytics is introduced, it will remain off until a visitor chooses it; the notice and cookie policy must be updated to describe the final configuration before activation.

Our current policy is normally to retain enquiries and related correspondence for up to 24 months after the last meaningful contact, unless the information becomes part of an engagement, a longer period is required by law, or it is reasonably needed for a dispute or legal claim. The contact endpoint keeps rate-limiting IP entries in temporary application memory for no more than one hour. Hosting, security and email providers retain service data according to their configured periods and service arrangements. The built-in Insights article list does not require visitor-side storage. We review stored information and remove or anonymise it when no longer needed for its purpose.

Authorised people working for Allington Advisors may access information where necessary. Service providers include Vercel for website hosting and delivery, Resend for contact-form messages and acknowledgement emails, and Supabase for the public Resources library. Notion supports the editorial content system; public article content may be delivered through our website rather than requiring you to sign in to Notion. These providers process information needed to provide their respective services. We may also share information with professional advisers, insurers, regulators, law-enforcement bodies or courts where reasonably necessary or legally required. External sites, including LinkedIn, have their own privacy practices when you choose to visit them.

Some service providers may process website request information or enquiries outside the United Kingdom. Resend states that its primary processing operations are in the United States. Resend's published data-processing terms include UK transfer clauses for contact emails. Vercel states that it participates in the UK Extension to the EU–US Data Privacy Framework for covered US transfers. These mechanisms do not mean that every provider, account or onward transfer is covered; we keep the relevant arrangements under review. Contact info@allingtonadvisors.com for information about an applicable transfer and its protections.

Depending on the circumstances, you may ask for access to your personal information, correction of inaccurate information, erasure, restriction of processing, or portability, and you may object to processing based on legitimate interests. If processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing. Rights are not absolute and may be subject to legal exceptions. Email info@allingtonadvisors.com to make a request; we may need to verify your identity and will respond within the period required by law.

If you are concerned about our handling of your information, contact info@allingtonadvisors.com so we can investigate. You may also complain to the Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint/ or by calling 0303 123 1113. We use proportionate security measures, but no online transmission or storage system is completely risk-free. We review this notice at least annually and when our processing materially changes.