Privacy Policy
Last updated
Grey Unicorn is a Fractional CFO consultancy working with creative agencies, consultancies, SaaS and technology companies. We work with businesses rather than private individuals, so the personal data we hold is limited, and this notice is deliberately short.
It explains what we hold, why we hold it, who we share it with and what you can ask us to do. It applies to this website and to our work with clients and prospective clients.
1. Who we are
Grey Unicorn is the data controller for the personal data described in this notice, which means we decide how and why it is used.
Our address for correspondence is 7 Bell Yard, London, WC2A 2JR.
Our data protection point of contact can be reached at info@grey-unicorn.co.uk, and deals with any question about this notice or about the personal data we hold.
2. The information we hold
We hold very little personal data. In most cases it amounts to the following.
- Business contact details: name, job title, employer, work email address and telephone number.
- Our correspondence with you: emails, meeting notes and the enquiries you send us.
- Details of the services provided, including the engagement letters and records we are required to keep.
- Enquiries sent through this website: the name, email address and message you submit.
We do not ask for or hold special category data, such as information about health, ethnicity or beliefs. We do not hold dates of birth or National Insurance numbers. We do not use automated decision making or profiling.
3. Where the information comes from
Usually from you directly, when you contact us, meet us or engage us. It may also reach us from your employer or our client, where you are their employee, supplier or customer, or from publicly available sources such as Companies House, a company website or a professional networking profile.
4. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and discussing how we might help | Steps taken at your request before entering a contract |
| Providing our services and administering the engagement | Performance of our contract with you or your employer |
| Keeping accounting, tax and professional records | Our legal obligations |
| Telling you about our services and insight where we believe they are relevant to your work | Our legitimate interest in developing the business, balanced against your interests |
| Understanding how this website is used | Your consent, given through the cookie banner |
Where we rely on legitimate interests, you can object at any time and we will stop unless we have compelling grounds to continue. Where we rely on consent, you can withdraw it at any time.
5. This website: cookies, analytics and the enquiry form
Cookies. This website sets no cookies and loads no analytics until you accept them. If you accept, we use Google Analytics to understand how visitors find and use the site, for example which pages are read and which articles are shared. We do not use advertising or profiling cookies.
You can change your mind at any time using the “Cookie settings” link at the foot of every page. If you decline, or later withdraw consent, analytics cookies are deleted and no analytics data is collected. Declining does not affect your use of the site.
The enquiry form. When you send a message using the form or the “Message us” button, we collect your name if you give it, your email address and your message, and use them only to reply. We also use an anti spam check provided by Cloudflare, which processes your IP address and browser information in order to tell genuine visitors from automated abuse.
Messages are delivered to our email inbox. They are not stored in any database on this website.
6. Who we share it with
We do not sell personal data, and we do not share it for anyone else’s marketing.
We use a small number of suppliers who process personal data on our instructions, under contract, and with appropriate security measures in place.
| Supplier | What they do |
|---|---|
| Cloudflare, Inc. | Hosts this website, provides security, and runs the anti spam check on the enquiry form |
| Resend (Plus Five Five, Inc.) | Delivers enquiry form messages to our inbox |
| Microsoft Corporation | Provides our email service, where correspondence is received and stored |
| Google Ireland Limited | Provides website analytics, only where you have accepted cookies |
We also share personal data with our professional advisers where necessary, and with regulators or other bodies where the law requires it. If the business were ever sold or restructured, personal data could be transferred as part of that process.
7. Transfers outside the United Kingdom
Some of our suppliers are based in, or store data in, the United States. Where personal data is transferred outside the UK, we rely on the safeguards recognised under UK law, which are the UK extension to the EU-US Data Privacy Framework, known as the UK-US data bridge, or the International Data Transfer Agreement issued by the Information Commissioner.
8. How long we keep it
We keep personal data only for as long as we need it.
- Enquiries that do not lead to an engagement: up to two years, so that we can pick up the conversation if you come back to us.
- Client records: for the duration of the engagement and then for six years, to meet our accounting, tax and professional obligations.
- Website analytics: retained by Google for fourteen months.
9. Your rights
Under data protection law you may ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is inaccurate or incomplete;
- delete personal data where there is no good reason for us to keep it;
- restrict how we use it while a concern is resolved;
- transfer it to you or another organisation, where the law provides for that;
- stop using it where we rely on legitimate interests, or withdraw your consent where we rely on consent.
Please write to info@grey-unicorn.co.uk. We will respond within one month. There is no charge, unless a request is clearly unfounded or excessive. We may ask you to confirm your identity before we release information.
10. Complaints, and changes to this notice
If you are unhappy with how we have handled your personal data, please tell us first so that we can put it right. You can also complain to the Information Commissioner’s Office, the UK supervisory authority:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/concerns
We review this notice from time to time and will publish any changes on this page.
This notice was last updated on 23 September 2026.