Privacy Policy
Beyond Forensic General Privacy Notice
Who are we?
Beyond Forensic (16194421), registered in England & Wales and whose registered office is at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, is committed to protecting your privacy and keeping any personal data you provide to us confidential, in accordance with UK data protection laws. This Privacy Notice sets out the information-processing activities that Beyond Forensic carries out in its capacity as the data controller.
All personal data collected by Beyond Forensic is processed in compliance with the requirements of the UK General Data Protection Regulation, the UK Data Protection Act 2018, the Data Use and Access Act 2025 and any other relevant legislation, such as the Privacy and Electronic Communications Regulation 2003 (PECR).
How is your information collected?
Personal data is any information about an individual that can identify that person. The personal information that we may collect about you broadly falls into the following categories:
Information that you provide voluntarily
We may process and store information that you have provided voluntarily. At each point, it will be clear to you what personal data you are providing.
Information that we obtain from third-party sources
From time to time, we may obtain personal information about you from third-party sources (for example, agencies), but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us.
Information that we collect from your activities
We automatically collect information about how you use our website through cookies and similar technologies. Some of these cookies are necessary for the website to function, while others (such as analytics cookies) are only used with your consent. When you first visit our website, you will see a cookie banner that lets you accept or reject non-essential cookies. More information on how we use cookies can be found in the ‘Use of cookies’ section below.
Public information
We may collect information about you from publicly available sources, such as corporate websites and public social media accounts, to contact you and promote our products and services. You can ask us to delete your information at any time.
Legal bodies or professionals (solicitors and courts)
Most of the personal information we hold is provided to us directly by solicitors who engage our services on behalf of their clients. When a solicitor instructs us in connection with a case, they will supply us with the relevant personal information we require to carry out our work. In some instances, individuals may approach us directly; in these circumstances, we will not commence any work or act upon any instructions until a solicitor has been engaged and is involved in the matter.
How is your information used?
We will only process (use) your personal information where:
we need to comply with a legal obligation;
we have a ‘legitimate interest’ in doing so. Our use will be fair and balanced and never unduly impact your rights;
we have a contract with you that we can only fulfil by using your personal information;
we determine that it is in the public interest;
we have asked for your consent to do so.
The following highlights the types of personal data that we use, what we use them for, and the lawful basis for processing:
Operation of client or customer accounts
Types of data:
Names and contact details
Addresses
Purchase or service history
Account information, including registration details
Information used for security purposes
Lawful Basis for processing -
Contract – the processing is necessary for a contract you have with the person, or because they have asked you to take specific steps before entering a contract.
Recognised Legitimate Interests -
Crime Prevention and Detection – applicable where our forensic work relates to the investigation or detection of financial crime or fraud.
Public Tasks Disclosure – applicable where we are required to share information with courts, tribunals or other authorised public bodies as part of legal proceedings.
Information updates or marketing purposes
Types of data:
Names and contact details
Marketing preferences
Lawful Basis for processing -
Consent - the person has clearly permitted you to use their information for a specific purpose.
Comply with legal requirements
Types of data:
Name
Contact information
Client account information
Any other personal information required to comply with legal obligations
Criminal offence data
Lawful Basis for processing -
Legal Obligation – the processing is necessary for you to comply with the law (not including contractual obligations).
Dealing with queries, complaints or claims
Types of data:
Names and contact details
Addresses
Payment details
Account information
Purchase or service history
Witness statements and contact details
Relevant information from previous investigations
Customer or client accounts and records
Financial transaction information
Correspondence
Lawful Basis for processing -
Legitimate interest - the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the person’s information which overrides those legitimate interests. This basis can’t apply if you’re a public authority handling personal information to perform your official tasks.
Special categories of personal data
We do not directly collect or request any special category personal data from you. However, as part of the nature of our work, there may be instances where special category personal data is passed to us indirectly. In these circumstances, we ourselves have no direct involvement in collecting this data, as it is provided solely to us. Any special category personal data received in this way will be handled with the utmost care and in full accordance with all applicable data protection legislation.
Legal / Contractual Obligations
For some of your personal information, you will have a legal, contractual, or other requirement or obligation to provide it to us. If you do not provide us with the requested personal information, we may not be able to properly perform our contract with you or comply with legal obligations. For other personal information, you are not obligated to provide it to us, but if you do not, we may not be able to perform our contract with you properly.
Recognised Legitimate Interests
Recognised legitimate interests are specific purposes set out in data protection law that may allow us to process personal information without completing the balancing part of a legitimate interests assessment. Where we rely on one of these recognised legitimate interests, we will use only the minimum personal data required and keep our decision under review.
Who we share your information with
We may share your personal information with the following categories of recipients:
IT and email service providers
We use third-party providers such as IONOS, MailerLite and Microsoft Suite to support our business communications and the secure storage of client data.
Cloud storage providers
We use services such as Dropbox, Google Drive, and IONOS to store case files, reports, and working documents securely.
Accounting and invoicing software providers
We use FreeAgent to manage billing, financial records and client account information.
Professional or legal advisors
We may share personal information where necessary to obtain legal or professional advice in connection with the management of our business.
Organisations with which we are legally obliged to share information
We may disclose personal information to regulatory authorities, law enforcement agencies, or other bodies when required to comply with a legal obligation.
Professional consultants
We may share personal information with specialist consultants when required to support the delivery of our services.
Third parties involved in legal proceedings
As part of our work in forensic accountancy and expert witness services, we may share personal information with instructing solicitors, barristers, counsel, courts and tribunals, opposing legal representatives, and other expert witnesses or professional consultants where necessary for case preparation, legal proceedings, or the production of expert reports.
This may also include sharing information during joint meetings with opposing experts, as required in legal proceedings.
Third Party Data Sharing
We will not sell or rent your personal information to third parties. Where we share your information with third parties, we will ensure:
we provide only the information they need to perform their specific services;
they may only use your data for the exact purposes we specify in our contract with them;
we work closely with them to ensure that your privacy is respected and always protected;
if we stop using their services, the data they hold about you will either be deleted or rendered anonymous.
International data transfers
We may transfer personal data outside the United Kingdom where necessary to operate our business. Where we do so, we ensure that appropriate safeguards are in place to protect your personal information.
We use the following service providers:
MailerLite, which may process data in the USA and the EEA. Transfers are safeguarded through the Data Privacy Framework and, where applicable, through adequacy decisions;
Dropbox, which may process data in the USA. Transfers are safeguarded through the Data Privacy Framework;
IONOS, which may process data in the USA and the EEA. Transfers are safeguarded through the Data Privacy Framework and, where applicable, adequacy decisions;
Microsoft Suite, which may process data in the USA. Transfers are safeguarded through the Data Privacy Framework;
Google Drive, which may process data in the USA. Transfers are safeguarded through the Data Privacy Framework.
If you would like more information about the safeguards we use for international data transfers, please contact us using the details provided in this privacy notice.
How long will we hold information about you?
We only hold information about you for as long as it is needed for the purpose(s) it was collected, or as required by law. You can request a copy of our Data Retention Schedule by contacting us using the details provided in this privacy notice.
How and when will you hear from us
We may use your contact details to update you about the latest news and events from Beyond Forensic.
With your consent, we may use your contact details to send you information by email about our services, updates and other information that may be of interest to you. This may include newsletters or insights relevant to our work.
You can opt out of our marketing communications at any time by clicking the “unsubscribe” link at the bottom of our emails.
Service communications
We may send you service-related communications where necessary to perform our services, comply with legal obligations, or where we have a legitimate interest in doing so.
These communications may include:
Notifying you about changes to our terms or privacy notice;
Providing updates in relation to our services or your enquiry.
Your rights
Under data protection law, you have rights, including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
Your right to withdraw consent - If the lawful basis for processing is consent, you have the right to withdraw that consent at any time. Please note, however, that the withdrawal of your consent will not affect any use of the data made before you withdrew your consent, and we may still be entitled to hold and process the relevant personal information to the extent that we are entitled to do so on bases other than your consent. Withdrawing consent may also have the same effects as not providing the information in the first place; for example, we may no longer be able to provide certain services to you.
Your right to object to direct marketing - Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for marketing, which includes profiling to the extent that it is related to such direct marketing.
You also have the right to object to and not be subject to a decision based solely on automated processing, including profiling. We do not use automated decision-making; however, we may perform minimal profiling to tailor our email marketing communications to ensure they are relevant to you.
To exercise any of these rights, please get in touch with us using the “Contact Us” section.
Making a complaint
Under the Data Use and Access Act 2025, the right to complain to the controller has been implemented. This means that if you have any issues with how your data is handled, you can contact us twice before referring to the ICO.
We take any complaints we receive about the collection and use of personal information very seriously. We would encourage you to bring it to our attention if you think that our collection or use of information is unfair, misleading or inappropriate. You have the right to make a complaint to us at Beyond Forensic. You can contact us using the details in the “Contact Us” section. We will investigate your complaint and aim to acknowledge it within 30 days and respond without undue delay.
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.
You can contact them by calling 0303 123 1113 or online at www.ico.org.uk/concerns
Use of cookies
Like many websites, our website uses cookies. Cookies are small text files placed on your device when you visit a website. They help the website function properly and allow us to understand how visitors use our site.
We use cookies from our website platform (Squarespace) and analytics cookies from Google Analytics.
Some cookies are necessary for the operation of our website and do not require your consent. Other cookies, such as analytics cookies, are only used with your consent.
When you first visit our website, you will see a cookie banner that lets you accept or reject non-essential cookies.
For more information about the cookies we use, please see our Cookie Policy.
Links to other websites
Our website may contain links to other websites run by other organisations. This privacy notice applies only to our website; please read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies of other sites (even if you access them using links found on our site).
Changes to our privacy policy
We may update this Privacy Notice from time to time by posting an amended version on our website. If at any time we decide to use your personal data in a manner different from what was stated when it was collected, we will notify you directly via email.
Contact us
If you have any queries regarding this policy, our website, or our services, please get in touch with us at mark@beyondforensic.com, by phone on 07738 023 523, or write to us at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.