10 Years of Protecting People & Businesses! Thank you for trusting Inverroy.

Prepare2Go

Privacy Policy

Last updated: 7 September 2026

Inverroy Crisis Management Ltd (“Inverroy”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information we collect, how and why we use it, who we may share it with, how long we keep it, and the rights you have in relation to it.

This policy applies to personal information collected through our website and through your interactions with Inverroy.

1. Who we are

Inverroy Crisis Management Ltd is a company registered in Scotland under company number SC501092.

Our registered address is:

Orchard Brae House
Suite 2, Ground Floor
Queensferry Road
Edinburgh
Scotland
EH4 2HS

For data protection enquiries or complaints, please contact:

Email: enquiries@inverroy.com
Telephone: +44 131 210 0025

For the purposes of UK data protection law, Inverroy Crisis Management Ltd is the controller of the personal information covered by this Privacy Policy.

2. Personal information we collect

The personal information we collect depends on how you interact with us.

It may include:

  • your name and contact details, including your email address and telephone number;
  • information you provide when you contact us or submit an enquiry through our website;
  • information contained in correspondence between you and Inverroy;
  • your name and email address if you subscribe to our mailing list;
  • information relating to your organisation, role or professional interests where relevant to your enquiry or our relationship with you;
  • information necessary to provide services to you or your organisation; and
  • technical and usage information about how you use our website, where you have permitted the relevant analytics technologies.

We do not ask you to provide more personal information than is reasonably necessary for the relevant purpose.

3. How we collect your information

We may collect personal information directly from you when you:

  • contact us by email, telephone or through our website;
  • submit an enquiry or contact form;
  • subscribe to our mailing list;
  • engage Inverroy to provide services;
  • communicate or otherwise interact with us.

We may also collect limited technical information when you use our website through cookies and similar technologies. More information about these technologies and the choices available to you can be found in our Cookie Policy.

In appropriate circumstances, we may also receive professional or business contact information from other sources, such as your employer or organisation, professional contacts, publicly available business sources, or someone who introduces you to Inverroy.

4. How and why we use your personal information

We may use your personal information to:

  • respond to enquiries and communicate with you;
  • take steps at your request before entering into a contract;
  • provide and manage our services;
  • administer our relationship with clients and other business contacts;
  • maintain appropriate business and financial records;
  • send you news, updates and marketing communications where permitted;
  • operate, maintain and secure our website;
  • understand how visitors use our website and improve its content and performance;
  • prevent spam, fraud, misuse and security threats;
  • comply with our legal and regulatory obligations; and
  • establish, exercise or defend legal rights where necessary.

We will only use your personal information where we have a lawful basis for doing so.

5. Our lawful bases for using your information

Depending on the circumstances, we rely on one or more of the following lawful bases:

Contract – where processing is necessary to enter into or perform a contract with you.

Legitimate interests – where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. These interests may include responding to business enquiries, managing client and professional relationships, operating and securing our website, improving our services and running our business effectively.

Consent – where you have given us clear permission to use your information for a particular purpose, such as certain email marketing or analytics activities. Where we rely on consent, you can withdraw it at any time.

Legal obligation – where we need to process information to comply with a legal or regulatory requirement.

The appropriate lawful basis depends on the particular information and the reason we are using it.

6. Contact forms and enquiries

If you submit an enquiry through our website, we collect the information you enter into the form, which currently includes your name, email address and message.

Your submission is stored securely within our website system and is also sent to Inverroy by email so that we can respond to your enquiry.

We use this information to respond to you, deal with your request and, where relevant, take steps towards providing our services.

Depending on the nature of your enquiry, our lawful basis will generally be our legitimate interests in responding to enquiries and developing our business, or taking steps at your request before entering into a contract.

Please avoid including sensitive or confidential personal information in a website enquiry unless it is necessary.

7. Email marketing

If you choose to subscribe to our mailing list, we use the information you provide, such as your name and email address, to send you Inverroy news, updates and other relevant communications.

We use Mailchimp to manage our email marketing. Mailchimp therefore processes subscriber information on our behalf.

Mailchimp is operated from the United States and personal information processed through the service may be transferred to, stored or processed in the United States and other countries. Mailchimp states that it uses recognised safeguards for European and UK data transfers, including participation in the UK Extension to the EU-US Data Privacy Framework and contractual safeguards where applicable.

Where we rely on your consent for email marketing, you can withdraw that consent at any time by clicking the unsubscribe link in any marketing email or by contacting us at enquiries@inverroy.com.

Unsubscribing from marketing will not prevent us from contacting you where necessary for another purpose, such as providing a service you have requested.

8. Website analytics

We use Google Analytics 4 (GA4), implemented through MonsterInsights, to help us understand how visitors use our website.

Analytics can provide information such as which pages are visited, how visitors reach our website, the type of device or browser being used and how visitors interact with the site.

Google Analytics is controlled through our cookie consent system. Analytics cookies are not enabled unless you choose to allow Statistics cookies.

You can refuse Analytics when you first visit our website and can change your cookie preferences later.

Our use of analytics helps us understand and improve the performance, usability and content of our website.

Further details about the cookies and technologies used are provided in our Cookie Policy.

9. Cookies and similar technologies

Our website uses cookies and similar technologies for purposes including:

  • providing essential website functionality;
  • remembering your cookie preferences;
  • protecting forms and the website against spam and abuse; and
  • website statistics and analytics, where you have allowed these.

Some content or functionality on our website may also involve third-party services such as Google reCAPTCHA, YouTube, Vimeo and LinkedIn.

Where consent is required, relevant technologies are blocked until you make the appropriate choice through our cookie banner.

You can accept, reject or manage optional cookies using the controls provided on the website and can change your preferences afterwards.

For details of the individual cookies and services used, their purposes and duration, please see our Cookie Policy.

10. Who we share your information with

We do not sell your personal information.

We may share personal information with trusted organisations that help us operate our business and provide our services. These may include:

  • website hosting, maintenance and security providers;
  • email and IT service providers;
  • Mailchimp, where you subscribe to our mailing list;
  • website analytics and technology providers;
  • professional advisers such as accountants, lawyers or insurers where necessary; and
  • public authorities, regulators or law enforcement bodies where we are legally required or permitted to do so.

Where another organisation processes personal information on our behalf, we take appropriate steps to ensure that the information is handled securely and in accordance with applicable data protection requirements.

We may also disclose personal information in connection with a sale, merger, restructuring or transfer of all or part of our business, subject to appropriate safeguards.

11. International transfers

Some of the technology and service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with UK data protection law. Depending on the destination and provider, this may include relying on UK adequacy regulations or appropriate contractual safeguards.

For example, information processed through Mailchimp may be transferred to the United States. Mailchimp provides mechanisms intended to safeguard transfers of UK and European personal information.

You can contact us at enquiries@inverroy.com if you would like further information about safeguards relating to an international transfer of your personal information.

12. How long we keep your personal information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet any legal, regulatory, accounting or reporting requirements.

In deciding how long to retain personal information, we consider:

  • the nature and sensitivity of the information;
  • the purpose for which we collected and use it;
  • whether that purpose can be achieved by other means;
  • our relationship with the individual or organisation concerned; and
  • any applicable legal, regulatory, contractual or reporting requirements.

Where you subscribe to our email marketing, we retain the information required to manage your subscription until you unsubscribe or withdraw your consent. We may retain limited information afterwards where necessary to record and respect your marketing preferences.

We periodically review the personal information we hold and securely delete or anonymise information that is no longer required.

13. How we protect your information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

These measures include appropriate website and IT security, access controls and appropriate safeguards when using third-party service providers.

However, no internet-based service or method of electronic storage can be guaranteed to be completely secure.

14. Your data protection rights

Depending on the circumstances and the lawful basis on which we process your information, UK data protection law gives you rights which may include the right to:

  • ask us for access to the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase your personal information in certain circumstances;
  • ask us to restrict the way we use your information in certain circumstances;
  • object to certain uses of your personal information;
  • receive certain personal information in a portable format;
  • withdraw your consent at any time where we rely on consent; and
  • raise a complaint about our use of your personal information.

These rights are not absolute and do not all apply in every circumstance.

You have the right to object to processing based on our legitimate interests. You also have the right to object at any time to the use of your personal information for direct marketing.

If you wish to exercise any of your rights, contact us at enquiries@inverroy.com.

We may need to ask you for information to confirm your identity before responding to a request.

15. Data protection complaints

If you have a concern or complaint about how Inverroy has collected, used, shared or protected your personal information, please contact us in the first instance:

Email: enquiries@inverroy.com

Post:
Inverroy Crisis Management Ltd
Orchard Brae House
Suite 2, Ground Floor
Queensferry Road
Edinburgh
Scotland
EH4 2HS

We will acknowledge receipt of your complaint within 30 days.

We will investigate your concerns appropriately and without undue delay, make appropriate enquiries, and keep you informed about the progress of our investigation where necessary.

We will communicate the outcome of our investigation to you without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.

Make a data protection complaint to the ICO

You do not have to contact us before approaching the ICO, although we would welcome the opportunity to address your concerns directly.

16. Third-party websites

Our website may contain links to websites or services operated by other organisations.

We are not responsible for the privacy practices of third-party websites. If you follow a link to another website, we recommend reviewing that organisation’s privacy information.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, technology or legal obligations.

The latest version will be published on this page and the Last updated date above will be changed accordingly.

If we make a significant change to the way we use personal information, we will take appropriate steps to bring that change to the attention of affected individuals where required.