Skip to content
Sign Up For Our Newsletter

Privacy Policy

Last updated: 17 August 2026

Oros Consultancy Ltd respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, communicate with us, receive marketing from us, attend an event, download our content, make an enquiry or use our introduction and consultancy services.

It also explains your rights under UK data protection law and how you can exercise them.

1. Who We Are

Oros Consultancy Ltd is a company registered in England and Wales.

Company name: Oros Consultancy Ltd
Company number: 12943435
Registered office: Suite E2, 2nd Floor, The Octagon, Middleborough, Colchester, Essex, United Kingdom, CO1 1TG

For the purposes of UK data protection law, Oros Consultancy Ltd is generally the data controller of the personal information described in this Privacy Policy.

You can contact us regarding privacy or data protection matters through the contact page on the Oros Consultancy website or by writing to our registered office.

2. The Laws That Apply

We process personal information in accordance with applicable UK data protection and privacy legislation, including:

  • the UK General Data Protection Regulation;
  • the Data Protection Act 2018;
  • the Privacy and Electronic Communications Regulations 2003, where applicable; and
  • the Data (Use and Access) Act 2025 and amendments made by it to UK data protection legislation.

3. Information We May Collect

The information we collect depends on how you interact with Oros Consultancy.

Identity and contact information

This may include:

  • your name;
  • postal address;
  • email address;
  • telephone number;
  • company name;
  • job title; and
  • other contact information you provide to us.

Investor and investment information

Where relevant to our services, we may collect information concerning:

  • your areas of investment interest;
  • your investment experience;
  • investment preferences;
  • anticipated investment amount or investment range;
  • intended investment timeframe;
  • investor classification or self-certification status;
  • information you provide through High Net Worth Investor, Sophisticated Investor or similar declarations;
  • investment opportunities about which you have requested information;
  • introductions that we have made on your behalf; and
  • records of your communications with Oros Consultancy.

We collect this information to understand the nature of your enquiry, provide appropriate information and introductions and maintain appropriate business and compliance records.

Oros Consultancy acts as an introducer. Unless expressly stated otherwise, payments relating to investments are made to the relevant investment provider or commercial partner rather than to Oros Consultancy.

Communications

We may keep records of:

  • emails;
  • telephone communications;
  • meetings;
  • website enquiries;
  • correspondence;
  • requests for information;
  • event registrations;
  • marketing preferences; and
  • other communications between you and Oros Consultancy.

Website and technical information

When you use our website, we may automatically collect certain technical information including:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • approximate geographical location derived from your IP address;
  • pages visited;
  • links clicked;
  • time and date of visits;
  • referral source;
  • website interaction and engagement information; and
  • cookie and tracking information where permitted.

Marketing information

We may record:

  • whether you have consented to marketing;
  • your marketing preferences;
  • emails sent to you;
  • whether an email has been delivered or opened;
  • links you have clicked;
  • forms or content you have interacted with; and
  • whether you have unsubscribed or objected to marketing.

4. How We Collect Your Information

We may obtain personal information in several ways.

Information you provide directly

This includes information provided when you:

  • complete a website form;
  • contact us by telephone or email;
  • download an investor guide, report or other material;
  • subscribe to a newsletter;
  • register for or attend an event;
  • respond to an advertisement;
  • request information about an investment opportunity;
  • complete an investor declaration or self-certification;
  • speak with a member of our team; or
  • ask us to introduce you to one of our commercial partners.

Information provided by third parties

We may receive information from:

  • introducers;
  • referral partners;
  • commercial partners;
  • event partners;
  • marketing partners;
  • legitimate business data providers;
  • professional advisers; and
  • other organisations where you have asked or authorised them to provide information to us.

Where we receive personal information from another source, we will handle it in accordance with applicable data protection and direct marketing laws.

Publicly available information

For business development and business-to-business communications, we may obtain professional information from legitimate publicly available sources, such as:

  • corporate websites;
  • business directories;
  • Companies House;
  • professional networking platforms; and
  • publicly available professional contact information.

We will only use such information where we have an appropriate lawful basis and where the proposed use is permitted by applicable electronic marketing laws.

5. How We Use Your Personal Information

We may use your information to:

  • respond to enquiries;
  • provide requested information;
  • understand your investment interests;
  • provide educational investment content;
  • arrange meetings;
  • provide information about investment opportunities;
  • facilitate introductions to commercial partners;
  • maintain records of introductions;
  • administer investor declarations or self-certifications;
  • send requested guides, reports or other materials;
  • organise events;
  • manage our relationship with you;
  • maintain and improve our website;
  • monitor the effectiveness of our communications;
  • improve our services;
  • manage our CRM and contact database;
  • send marketing communications where legally permitted;
  • prevent fraud or misuse of our website;
  • maintain website and information security;
  • comply with legal or regulatory requirements;
  • respond to complaints;
  • establish, exercise or defend legal claims; and
  • maintain appropriate business and compliance records.

We will not use your personal information for purposes that are incompatible with the purposes for which it was originally collected unless permitted by law.

6. Our Lawful Bases for Processing

UK data protection law requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following bases.

Legitimate interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

These interests may include:

  • responding to enquiries;
  • operating and developing our business;
  • maintaining relationships with prospective and existing clients;
  • understanding interest in our services;
  • maintaining appropriate records;
  • protecting our systems and website;
  • measuring the effectiveness of our services and communications; and
  • carrying out appropriate business-to-business marketing where permitted by law.

Consent

We rely on consent where the law requires it, including for certain:

  • marketing emails;
  • electronic marketing communications; and
  • non-essential website cookies and tracking technologies.

Where we rely on your consent, you can withdraw it at any time.

Contract or steps before entering into a contract

Where appropriate, we may process information because it is necessary to provide something you have requested or to take steps at your request before entering into a contractual relationship.

Legal obligation

We may process or retain information where necessary to comply with applicable laws, court orders, regulatory requirements or other legal obligations.

7. Direct Marketing

We may send information about:

  • investment education;
  • market commentary;
  • articles and reports;
  • investment opportunities;
  • alternative assets;
  • private market opportunities;
  • events;
  • guides and educational materials; and
  • other services provided or introduced by Oros Consultancy.

We only send electronic direct marketing where we have an appropriate lawful basis and where the communication is permitted under applicable electronic marketing laws.

Depending on the circumstances, this may include:

  • your explicit consent;
  • a legally permitted existing relationship or soft opt-in; or
  • legitimate interests where electronic marketing rules permit their use, including certain business-to-business communications.

Every marketing email sent by us will provide a way for you to unsubscribe.

You may also contact us directly at any time and ask us to stop sending marketing.

Your right to object to direct marketing

You have an absolute right to object to the use of your personal information for direct marketing.

If you tell us that you do not wish to receive direct marketing from us, we will stop using your information for that purpose.

We may retain a minimal suppression record containing sufficient information to ensure that your preference continues to be respected.

8. Lead Generation and Prospective Clients

Oros Consultancy undertakes business development and lead generation activity.

Your information may therefore be processed where you:

  • respond to one of our advertisements;
  • submit an enquiry;
  • download content;
  • register for an event;
  • interact with one of our campaigns;
  • are referred by a partner or introducer; or
  • are identified through a legitimate business information source.

Where information has not been obtained directly from you, we will use it only where we have an appropriate lawful basis and where its use complies with applicable direct marketing legislation.

You may object to the use of your information for marketing at any time.

9. Introductions to Commercial Partners

One of Oros Consultancy's services is introducing prospective investors and clients to third-party commercial partners.

Where you ask us to make an introduction or indicate that you wish to receive information from a particular provider or opportunity, we may provide relevant personal information to that organisation.

This may include:

  • your name;
  • telephone number;
  • email address;
  • investment interest;
  • anticipated investment range;
  • relevant investor classification information; and
  • other information reasonably necessary to facilitate the introduction.

Once your information has been transferred to an independent third-party organisation, that organisation may become a separate data controller and will be responsible for explaining how it processes your personal information.

You should review the relevant organisation's privacy information before proceeding with it.

We do not give commercial partners unrestricted permission to use your personal information for unrelated purposes.

10. Who We May Share Your Information With

We may share personal information with carefully selected organisations where necessary, including:

  • investment providers and commercial partners where you have requested or agreed to an introduction;
  • website hosting providers;
  • CRM providers;
  • email and marketing technology providers;
  • cloud and IT service providers;
  • analytics providers;
  • professional advisers;
  • accountants;
  • solicitors;
  • consultants and contractors working on our behalf;
  • event providers;
  • regulators, public authorities or law enforcement bodies where required by law; and
  • prospective purchasers or advisers in connection with a genuine sale, merger, restructuring or transfer of our business.

Service providers acting on our behalf are expected to handle personal information securely and only for the purposes for which they have been engaged.

We do not sell personal information to third parties for their own unrelated marketing purposes.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files or technologies placed on or accessed from your device that enable websites to function and can provide information about how the website is being used.

We may use:

Strictly necessary cookies

These are required for the website to operate correctly and generally do not require consent.

Analytics cookies

These help us understand how visitors use our website, which pages are viewed and how the website performs.

Functionality cookies

These allow the website to remember preferences or provide enhanced functionality.

Marketing and advertising cookies

These may be used to measure campaigns, understand visitor engagement or provide relevant advertising.

Where consent is required, non-essential cookies will not be activated until you have provided the appropriate consent.

You can change or withdraw your cookie choices through the cookie settings available on our website.

Further information about individual cookies, their providers, purposes and duration should be available through our cookie settings or Cookie Policy.

12. CRM, Analytics and Profiling

We may use CRM and marketing technology to organise our communications and understand the interests of prospective and existing clients.

For example, we may use information concerning:

  • articles you have viewed;
  • guides you have downloaded;
  • emails you have opened;
  • links you have selected;
  • forms you have completed; and
  • opportunities in which you have expressed an interest.

This may allow us to categorise contacts according to their interests and provide more relevant communications.

We do not currently use solely automated decision-making that produces legal effects or similarly significant effects upon individuals.

13. International Transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure the transfer is lawful.

Depending on the destination and circumstances, these protections may include:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to approved contractual clauses; or
  • another safeguard recognised under UK data protection law.

You may contact us if you require further information about the safeguards applicable to your information.

14. How Long We Keep Your Information

We do not keep personal information for longer than is reasonably necessary.

The period for which information is retained depends upon:

  • why it was collected;
  • the nature of our relationship with you;
  • whether you remain an active or prospective client;
  • the nature of any introduction we have facilitated;
  • applicable legal and regulatory requirements;
  • our legitimate business record-keeping requirements;
  • limitation periods relating to potential legal claims; and
  • whether you have asked us not to contact you.

Prospective client and enquiry information is periodically reviewed and may be deleted or anonymised where there has been no meaningful engagement and there is no legitimate reason to retain it.

Records relating to introductions, investor declarations, significant business communications and transactions may be retained for longer where reasonably necessary for compliance, audit or legal purposes.

Where you unsubscribe from marketing, we may retain limited information on a suppression list so that we can continue to honour your request.

Cookie and analytics information is retained in accordance with the applicable provider settings and our cookie controls.

15. Security of Your Information

We take appropriate technical and organisational measures to protect personal information against:

  • unauthorised access;
  • accidental loss;
  • alteration;
  • inappropriate disclosure;
  • misuse; and
  • destruction.

Measures may include access restrictions, authentication controls, secure technology systems, appropriate staff procedures and contractual protections with service providers.

Access to personal information is limited to those who reasonably require it for legitimate business purposes.

No internet-based system can be guaranteed to be completely secure. We therefore continually review our security arrangements and the service providers we use.

16. Your Data Protection Rights

Depending on the circumstances and the lawful basis being relied upon, you may have the following rights.

Right of access

You can ask for confirmation that we process your personal information and request a copy of the information we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete information.

Right to erasure

In certain circumstances, you can ask us to delete your personal information.

Right to restrict processing

You may be able to ask us to restrict the way in which your information is processed.

Right to object

You may object to certain processing based on legitimate interests.

You have an absolute right to object to direct marketing.

Right to data portability

In certain circumstances, you may ask us to provide personal information you supplied to us in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

You will not normally be required to pay a fee to exercise your data protection rights.

We may need to request sufficient information to verify your identity before responding to a request.

17. How to Exercise Your Rights

If you wish to:

  • access your information;
  • correct your information;
  • request deletion;
  • withdraw consent;
  • object to processing;
  • unsubscribe from marketing;
  • restrict processing;
  • request data portability; or
  • raise a privacy concern,

please contact Oros Consultancy through our website contact page or write to:

Oros Consultancy Ltd
Suite E2, 2nd Floor
The Octagon
Middleborough
Colchester
Essex
CO1 1TG
United Kingdom

Please provide sufficient information for us to identify you and understand your request.

18. Data Protection Complaints

If you have concerns about the way we have collected, used, stored or shared your personal information, please contact us in the first instance.

We will take reasonable steps to facilitate data protection complaints, acknowledge a data protection complaint within 30 days and respond without undue delay.

You may submit a complaint through our website contact facilities or in writing to our registered office.

If you are dissatisfied with our response, you have the right to complain to the UK's data protection regulator:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

You may approach the Information Commissioner's Office at any time, although we would appreciate the opportunity to resolve your concerns first.

19. Children

Our website and services are principally intended for adults and are not designed for children under the age of 18.

We do not knowingly seek to collect personal information from children for investment or marketing purposes.

If we become aware that personal information concerning a child has been collected unnecessarily, we will take appropriate steps to remove it.

20. Special Category Information

We do not generally require information concerning matters such as:

  • health;
  • racial or ethnic origin;
  • political opinions;
  • religious beliefs;
  • trade union membership;
  • genetic or biometric information; or
  • sexual orientation.

Please avoid providing this type of information unless it is genuinely necessary.

Where we need to process special category information, we will only do so where an appropriate lawful basis and additional legal condition apply.

21. Third-Party Websites

Our website may contain links to external websites, investment providers and other third parties.

Oros Consultancy is not responsible for the privacy practices of websites operated by other organisations.

If you follow an external link, you should review that organisation's own Privacy Policy before submitting personal information.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

  • changes to our services;
  • changes to our technology;
  • changes to the way we use information;
  • new service providers; or
  • changes to applicable law or regulatory guidance.

The latest version will be published on our website and the date at the top of this Privacy Policy will be updated accordingly.

Where a change materially affects the way we use personal information, we will take reasonable steps to bring that change to the attention of affected individuals before the new processing takes place.

23. Contact Us

Questions about this Privacy Policy, your personal information or the way Oros Consultancy handles personal data should be directed to:

Oros Consultancy Ltd
Company number 12943435
Suite E2, 2nd Floor
The Octagon
Middleborough
Colchester
Essex
CO1 1TG
United Kingdom

You can also contact us through the contact facilities provided on the Oros Consultancy website.