Last updated: 16 July 2026 · Valorous Group Ltd
Valorous Group Ltd (“Valorous Group”, “we”, “us” or “our”) is committed to protecting the privacy of everyone who contacts us or uses our website. Discretion is central to how we operate, and the careful handling of personal information is part of that commitment. This policy explains what information we collect through www.valorousgroup.co.uk, how we use it, and the rights you hold over it.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Valorous Group Ltd, a company registered in England and Wales under number 11076375, with its registered office at Bryn Isel, The Bank, Newtown, SY16 2AB. We are registered with the Information Commissioner’s Office under reference ZB480905.
1. The information we collect
We collect only the information we need in order to respond to enquiries and provide our services. Depending on how you interact with us, this may include:
- Information you provide directly — your name, contact details (email address, telephone number), the street or area you refer to when making an enquiry, and any information you choose to include in a message, an enquiry form, or an exposure assessment request.
- Information collected automatically — when you visit the website we collect limited technical information such as your IP address, browser type, the pages you view, and the date and time of your visit. This is collected through cookies and analytics, and only where you have consented to non-essential cookies. See our Cookie Policy.
Given the nature of our work, we deliberately ask for as little as possible at the enquiry stage. We do not request sensitive personal information through the website, and we ask that you do not submit confidential operational details through online forms.
2. How we use your information, and our lawful basis
We use personal information for clearly defined purposes, each with a lawful basis under UK GDPR:
| Purpose | Information used | Lawful basis |
|---|---|---|
| Responding to your enquiry and arranging a confidential conversation | Name, contact details, enquiry content | Legitimate interests, and steps taken at your request prior to any engagement |
| Providing and administering our services to clients | Contact and engagement details | Performance of a contract; legitimate interests |
| Maintaining internal records and managing our relationship with you | Contact and correspondence records | Legitimate interests; legal obligation where applicable |
| Understanding and improving how the website is used | Analytics data (via cookies) | Consent |
| Protecting the security and integrity of the website | Technical and security data | Legitimate interests |
Where we rely on legitimate interests, we have considered your rights and would not use your information in a way you would find intrusive. Where we rely on consent, you may withdraw it at any time.
3. Cookies and analytics
The website uses cookies. Essential cookies keep the site secure and functioning; analytics cookies help us understand how the site is used and are set only where you consent through our cookie banner. Full details, including the specific cookies used, are set out in our Cookie Policy. You can change your preferences at any time using the cookie settings on the site.
4. Who we share your information with
We do not sell your personal information, and we do not share it for third-party marketing. We share information only where necessary:
- Our team and professional advisers — colleagues involved in responding to your enquiry, and, where appropriate, our professional advisers, all bound by confidentiality.
- Trusted service providers that operate the website and our systems on our behalf, acting only on our instructions. These currently include our website hosting and security provider (including Cloudflare, Inc. for content delivery and security), and Google LLC for website analytics.
- Where required by law — if we are under a legal or regulatory obligation to disclose information.
5. International transfers
Some of our service providers, such as Google and Cloudflare, may process data on servers outside the United Kingdom. Where personal information is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses.
6. How we protect your information
We apply appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access, and we keep those measures under review. Access to information is limited to those who need it. If you suspect any misuse or loss of, or unauthorised access to, your information, please contact us immediately at [email protected].
7. How long we keep your information
We keep personal information only for as long as necessary for the purposes described in this policy. Enquiry correspondence that does not lead to an engagement is normally retained for up to 24 months and then deleted, unless a longer period is required by law. Information relating to client engagements is retained for the duration of the engagement and for a reasonable period afterwards to meet our legal, tax and regulatory obligations. Backup copies may persist for a limited further period before being overwritten.
8. Your rights
Under UK GDPR you have the right to:
- request access to the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to erase your information where there is no continuing reason to keep it;
- ask us to restrict or object to our processing of your information;
- request the transfer of your information (data portability); and
- withdraw consent at any time where we rely on it.
To exercise any of these rights, please contact us at [email protected]. We will respond within one month. If you are not satisfied with how we handle your information, you have the right to complain to the Information Commissioner’s Office at ico.org.uk, although we would welcome the opportunity to resolve any concern with you first.
9. Links to other websites
Our website may contain links to other sites, including social media. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their own policies before providing any information.
10. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. Any changes will be posted on this page with a revised “last updated” date.
11. How to contact us
For any question about this policy or your information, please contact:
Valorous Group Ltd
Data protection: [email protected]
Correspondence: 78 Pall Mall, London, SW1Y 5ES · 020 3858 8008
Registered in England and Wales No. 11076375 · Registered office: Bryn Isel, The Bank, Newtown, SY16 2AB
ICO registration: ZB480905