RRG Consulting Limited ("RRG", "we", "us" or "our") is a company incorporated in England and Wales with company number 15997860 and registered office at c/o The Old Mill, Kings Mill, Kings Mill Lane, South Nutfield, Surrey, United Kingdom, RH1 5NB. We provide regulatory advisory, compliance and financial services consultancy, including support for Electronic Money Institution (EMI) licence applications and other FCA-regulated activities. This Privacy Notice explains how we collect, use, process and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Section 01
Who We Are
RRG Consulting Limited is a UK-based regulatory consultancy specialising in financial services advisory, including FCA authorisation, compliance frameworks, governance and risk management support.
Section 02
How We Collect Personal Data
We collect personal data directly from individuals — for example via email, telephone, meetings, and the enquiry form at www.rrgconsulting.co.uk — and indirectly from clients, public sources, and professional networks.
Section 03
Categories of Personal Data
We may process the following categories of personal data:
- Contact details (name, email address, telephone number)
- Professional information (company name, job title, employer)
- Financial information, where relevant to the services we provide
- Identification data, where required for regulatory or compliance purposes
- Communications and correspondence
Section 04
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract — where processing is necessary to perform or prepare to perform a contract with you
- Legal obligation — where we are required to process data to comply with applicable law or regulatory requirements
- Legitimate interests — where processing is necessary for our legitimate business interests and does not override your rights
- Consent — where you have given explicit consent for a specific purpose
Section 05
Why We Use Personal Data
We use personal data to:
- Deliver consultancy and advisory services
- Manage FCA-related engagements and regulatory matters on behalf of clients
- Maintain and manage client relationships
- Comply with our own regulatory and legal obligations
- Respond to enquiries submitted via our website or by other means
- Support legitimate business development activities
Section 06
Sharing Personal Data
We may share personal data with:
- Professional advisers (legal, financial, or technical) engaged to support our services
- IT and software service providers who process data on our behalf under appropriate data processing agreements
- Regulators, including the Financial Conduct Authority (FCA), where required or permitted by law
- Law enforcement authorities where legally required
We do not sell personal data to third parties.
Section 07
International Transfers
Where personal data is transferred outside the UK or European Economic Area, we implement appropriate safeguards in accordance with UK GDPR.
Section 08
Data Security
We implement appropriate technical and organisational measures to safeguard personal data, including access controls, encryption where appropriate, and secure systems. We regularly review our security arrangements to ensure they remain proportionate to the risks involved.
Section 09
Artificial Intelligence
RRG may use artificial intelligence tools to support service delivery, data analysis and operational efficiency. Where such tools process personal data, we ensure they are used in line with regulatory expectations and applicable data protection law. Personal data is not used to train third-party AI models without appropriate safeguards and, where required, consent.
Section 10
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected. In most cases this means retaining records for up to 7 years following the end of an engagement, in line with regulatory and legal obligations. Enquiry data received via our website where no engagement follows is retained for no longer than 12 months.
Section 11
Your Rights
Under UK GDPR, you have the following rights in respect of your personal data:
- The right to access your personal data
- The right to have inaccurate data corrected
- The right to erasure ('right to be forgotten') in certain circumstances
- The right to restrict processing in certain circumstances
- The right to object to processing based on legitimate interests
- The right to data portability where processing is based on consent or contract
To exercise any of these rights, please contact us using the details in section 14. We will respond within one calendar month.
Section 12
Cookies
The RRG Consulting website (www.rrgconsulting.co.uk) does not use cookies for tracking, analytics, or marketing purposes. No third-party tracking scripts are deployed on the website. The only data collected is that which you voluntarily submit via the contact form.
Section 13
Links to Other Websites
Our website may contain links to third-party websites including LinkedIn. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies before providing any personal data.
Section 14
Contact Details
For any privacy-related queries, requests to exercise your rights, or concerns about how we handle your personal data, please contact us at:
Registered address: c/o The Old Mill, Kings Mill Lane, South Nutfield, Surrey, RH1 5NB
Section 15
Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
Section 16
Updates to This Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. The most recent version will always be available on our website at www.rrgconsulting.co.uk. The date at the top of this notice indicates when it was last revised.