Privacy Policy

Last Updated: November 2025

1. Introduction

Charles Park Family Office (“we”, “our”, or “us”) is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or engage with our services.

2. Who We Are

Charles Park Family Office
Level 30
The Leadenhall Building
122 Leadenhall Street
London
United Kingdom
EX3V 4AB

For any questions regarding this Privacy Policy or our data practices, please contact:
Data Protection Officer
Email: enquiries@charlesparkfamilyoffice.com
Telephone: +44 (0)207 362 6690

3. Information We Collect

We may collect and process the following categories of personal data:

Information You Provide Directly:

Name and contact details (email address, telephone number, postal address)
Professional information (job title, company name)
Communication preferences
Any information you provide when contacting us through forms, email, or telephone
Information provided during consultations or service engagements

Information Collected Automatically:

Technical data including IP address, browser type, device information
Usage data including pages visited, time spent on pages, navigation patterns
Cookies and similar tracking technologies (see Section 9)

Information from Third Parties:

Publicly available information from professional networks (e.g., LinkedIn)
Information from professional referrals or business partners (with appropriate consent)
Background verification data where required for client onboarding

4. How We Use Your Information

We process your personal data for the following purposes:

Service Delivery:

To provide family office consulting and advisory services
To communicate with you regarding our services
To conduct due diligence and client onboarding procedures
To manage client relationships and deliver bespoke solutions

Legal and Regulatory Compliance:

To comply with anti-money laundering (AML) and know-your-customer (KYC) requirements
To meet legal and regulatory obligations
To protect against fraud and security threats

Business Operations:

To respond to enquiries and provide information about our services
To improve our website functionality and user experience
To conduct market research and business development
To maintain records for business continuity

Marketing (with your consent):

To send newsletters, insights, and relevant industry updates
To inform you about events, seminars, or services that may interest you

5. Legal Basis for Processing

We process your personal data under the following legal bases:

Contractual necessity: Processing required to deliver services you have engaged us to provide
Legitimate interests: Our business operations, client relationship management, and service improvement (balanced against your rights and interests)
Legal obligation: Compliance with regulatory requirements including AML/KYC, tax obligations, and financial services regulations
Consent: Marketing communications and certain cookie usage (which you may withdraw at any time)

6. Data Sharing and Disclosure

We maintain strict confidentiality protocols. We may share your personal data only in the following circumstances:

Professional Service Providers:

Legal advisers, accountants, tax specialists, and other professional consultants engaged to support client services
Technology service providers (hosting, CRM, communication platforms) under strict data processing agreements

Regulatory and Legal Requirements:

Regulatory authorities, law enforcement, or government bodies when legally required
Courts or tribunals where necessary for legal proceedings

Business Partners:

Trusted partners providing complementary services (with your explicit consent)
Professional networks for referral purposes (where appropriate)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. International Data Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area (EEA). If we transfer data outside these regions, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the UK Information Commissioner’s Office
Transfers to countries with adequacy decisions
Other legally approved transfer mechanisms

8. Data Security

We implement robust security measures to protect your personal data:

Encryption of data in transit and at rest
Secure access controls and authentication protocols
Regular security assessments and penetration testing
Staff training on data protection and confidentiality
Secure document management systems
Regular backups and disaster recovery procedures

Despite our best efforts, no data transmission over the internet is completely secure. We cannot guarantee absolute security but maintain industry-leading practices.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality and analyse usage patterns.

Essential Cookies:

Required for website operation and security (cannot be disabled)

Analytics Cookies:

Help us understand how visitors use our website (e.g., Google Analytics)

Marketing Cookies:

Used to deliver relevant content and track campaign effectiveness

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect website functionality.

10. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

Active client data: Duration of engagement plus 7 years (regulatory requirements)
Prospective client data: 3 years from last contact
Marketing data: Until consent is withdrawn or 3 years of inactivity
Website analytics: Typically 26 months

After retention periods expire, we securely delete or anonymise data in accordance with our data retention schedule.

11. Your Rights

Under UK data protection law, you have the following rights:

Right of access: Request copies of your personal data
Right to rectification: Correct inaccurate or incomplete data
Right to erasure: Request deletion of your data (subject to legal obligations)
Right to restrict processing: Limit how we use your data
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for marketing purposes
Right to withdraw consent: Withdraw consent for processing at any time (where consent is the legal basis)
Right to lodge a complaint: Contact the Information Commissioner’s Office (ICO)

To exercise these rights, please contact our Data Protection Officer using the details in Section 2.

12. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.

13. Children’s Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will promptly delete the information.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The “Last Updated” date at the top indicates the most recent revision. Material changes will be communicated via email or prominent website notice.

15. Contact Us

For questions, concerns, or to exercise your data protection rights:

Charles Park Family Office
Level 30
The Leadenhall Building
122 Leadenhall Street
London
United Kingdom
EX3V 4AB

Email: enquiries@charlesparkfamilyoffice.com
Telephone: +44 (0)207 362 6690

Information Commissioner’s Office (ICO)
If you believe your data protection rights have been violated, you may lodge a complaint with:
Website: ico.org.uk
Telephone: 0303 123 1113