Privacy notice.

1. Who we are

Regetus is a trading name of Pi Zeta Ltd, a company registered in England and Wales, company number 10132555, with its registered office at 2nd Floor, 10-12 Bourlet Close, London W1W 7BR. Pi Zeta Ltd is the controller of the personal data described in this notice. You can contact us about it at info@regetus.com.

2. What we collect

When you send an enquiry

Your name, email address and, if you give it, your telephone number; the name of your firm; and whatever you tell us about the firm and what it is trying to do.

When we act for a firm

A regulatory application or notification asks about the people who run and own the firm. For its directors, senior managers and controllers we collect what the regulator's forms require — typically names and previous names, dates and places of birth, nationality, identity documents, addresses, employment history, other directorships and interests, the source of funds and wealth of controllers, and the answers to the regulator's fitness and propriety questions, which can include criminal convictions, insolvency, judgments and regulatory history.

Information about criminal convictions and offences has special protection under Article 10 of the UK GDPR. We process it only with the consent of the individual concerned, for the purpose of the firm's application (Data Protection Act 2018, Schedule 1, paragraph 29), and share it only with the regulator to which the application is made. The individual can withdraw that consent at any time; if they do, we cannot include them in the application.

When you visit the site

Our hosting provider records the technical information any web server receives, such as IP addresses and browser types, to operate and secure the site. This site sets no cookies and uses no analytics or advertising trackers. Its fonts are served from the site itself, not from a third party.

3. How we use it, and on what basis

We use enquiry details to reply to you and to decide whether and how we can help — on the basis of our legitimate interest in responding to people who contact us. We use the information collected during an engagement to carry out the work the firm has instructed us to do — on the basis of the contract with the firm and our legitimate interest in performing it — and to keep the records the law requires of us.

4. Who we share it with

We do not sell personal data. We share it only where necessary: with service providers who process it on our instructions (Netlify, which hosts this site and receives its form submissions, and the providers of our email and document storage); with the regulator to which an application or notification is made, on the firm's instruction; with professional advisers where reasonably required; and with authorities where the law requires it.

5. International transfers

Some of our service providers process data outside the UK. Where they do, the transfer is protected by an adequacy decision or by UK-approved contractual safeguards. Applications to regulators in the European Union necessarily involve sending data to them.

6. How long we keep it

Enquiries that do not lead to an engagement are kept for as long as we need them to deal with the enquiry, and then deleted. Engagement files, including the information about directors and controllers, are kept for six years after the engagement ends, so that we can answer any later question about the work, and then deleted. Financial records are kept for six years as UK tax law requires.

7. Your rights

You have the right to ask for access to the personal data we hold about you, to have it corrected, to have it erased or its use restricted in certain circumstances, to object to our processing of it, to receive it in a portable form, and to withdraw consent where we rely on consent. To exercise any of these rights, email info@regetus.com.

8. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No transmission over the internet is completely secure, which is one reason we ask you not to send identity documents or directors' personal details through the enquiry form.

9. Complaints

If you are unhappy with how we have handled your personal data, please tell us first at info@regetus.com or by writing to our registered office. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.

10. Changes

We may update this notice from time to time. When we do, we change the date at the top of the page.