- +44 (0) 203 668 1450
- +44 (0) 7780 595 751
Last updated: [DATE]
Cormack Advisory is the trading name of [REGISTERED BUSINESS NAME] (“Cormack Advisory”, “we”, “us”), 23 Melville Street, Edinburgh EH3 7PE, Scotland, United Kingdom. Cormack Advisory is the controller of personal data collected through this website. Email: brian.cormack@cormackadvisory.com. Telephone: +44 20 3668 1450.
We are registered with the Information Commission (ICO) under registration number [ICO REGISTRATION NUMBER]. Personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), each as amended by the Data (Use and Access) Act 2025.
Server log files. When you visit this site, our hosting provider automatically records information your browser transmits: browser type and version, operating system, referring URL, host name, time of request and IP address. This data is not combined with other sources. The legal basis is our legitimate interests under Article 6(1)(f) UK GDPR in operating the site securely and reliably.
Enquiries. If you contact us by email, by telephone or through any form on this site, we use the details you provide, such as your name, contact details and the nature of your enquiry, to respond and to follow up. The legal basis is Article 6(1)(b) UK GDPR where your enquiry relates to a possible engagement, and our legitimate interests under Article 6(1)(f) UK GDPR in responding to enquiries otherwise.
Your circumstances. Residency and citizenship enquiries can involve personal details such as your nationality, family members and financial position. Please share only what is needed at the first stage. We do not ask for special category data, such as health information, through this website.
Introductions to professional partners. If you ask us to introduce you to a professional partner, such as a legal, tax, financial or relocation specialist, we share the details needed for that introduction, and only with your agreement. The partner then handles your data as a separate controller under its own privacy notice. The legal basis is Article 6(1)(b) UK GDPR, as the introduction is a step taken at your request.
Cookies. This site uses cookies as described in the Cookie Policy. Cookies that are not strictly necessary, including any analytics or marketing tools, are set only in line with the choices you make in the cookie banner. You can change those choices at any time on the Cookie Policy page.
Enquiries that do not lead to an engagement are deleted within two years of our last contact with you. Where an engagement follows, records are kept for as long as the engagement requires and for any longer period required by law, for example under tax and accounting rules. Server log files are kept by our hosting provider for a short period for security purposes and then deleted.
We share personal data only where needed: with service providers that support this website and our communications, such as our hosting and email providers, under contracts that require them to protect it; with professional partners you have asked to be introduced to; and with professional advisers or public authorities where the law requires it. We do not sell personal data.
Some of our service providers may process personal data outside the UK. Where they do, we rely on UK adequacy regulations or on appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
If you ask to be introduced to a partner based in another country, your details are sent to that country at your request. Where that country is not covered by UK adequacy regulations, the transfer is made because it is necessary for the steps you have asked us to take, or with your explicit consent.
You have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict processing, to data portability, to object to processing based on legitimate interests, and to object at any time to the use of your data for direct marketing. Where processing is based on consent, you may withdraw that consent at any time; this does not affect processing carried out before withdrawal. To exercise any of these rights, email brian.cormack@cormackadvisory.com. We normally respond within one month.
If you are unhappy with how your personal data has been handled, please contact us first at brian.cormack@cormackadvisory.com. We will acknowledge your complaint within 30 days, deal with it without undue delay and tell you the outcome.
You also have the right to complain to the UK supervisory authority, the Information Commission (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113. Website: ico.org.uk.
This site uses SSL/TLS encryption to protect information in transit, shown by https in the address bar and a padlock symbol. Access to enquiries is limited to those who need it to deal with them.
We may update this policy to reflect changes to the site, our services or the law. The version published on this page is the current version.