Privacy Policy – Dune Advisors

1. About Us and Privacy Policy

Dune Advisors is a London-based boutique management consulting firm specialising in Business Transformation and Mergers and Acquisitions. Our registered address is 33 Cavendish Square, London, W1G 0PW, United Kingdom.

This Privacy Policy explains how we collect, use, store and share personal data when you visit our website (www.duneadvisors.com), enquire about our services, or engage with us as a client or candidate. Please read it alongside any other privacy information we provide at the point of data collection.

We are committed to handling your personal data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions, please contact us at info@duneadvisors.com.

2. Personal Data We Collect

Depending on your relationship with us, we may collect the following categories of personal data:

Identity data: name, title, date of birth and identification documents (where required for compliance purposes).
Contact data: email address, telephone number and business or home address.
Professional data: job title, company name, employment history, skills and relevant experience.
Service and transaction data: information related to the services we provide or discuss with you, including correspondence, documents and instructions you share with us.
Technical data: IP address, browser type and version, device information and data collected via cookies and similar technologies when you use our website.
Marketing and communications data: your preferences regarding receiving information from us and records of communications between us.

Where relevant to a specific engagement, we may also process special category data (for example, health information relevant to an employment matter). We will only do so where we have a lawful basis and, where required, your explicit consent.

3. How We Collect Your Data

We collect personal data in the following ways:

Directly from you, when you contact us by email, phone or through our website, complete a form or apply for a role.
In the course of providing services, from correspondence, documents and instructions you share with us.
From publicly available sources, such as LinkedIn and company registrars (for example, Companies House).
From third parties, such as professional advisors, referrers or recruitment agencies acting on your behalf.
Automatically via our website, through cookies and analytics tools. Please contact for more information.

4. How We Use Your Data

We will only use your personal data where we have a lawful basis to do so. The main purposes for which we process personal data are:

To respond to your enquiries and provide our services to you (contract performance or legitimate interests).
To carry out compliance checks, including conflict of interest screening and anti-money laundering checks where required (legal obligation).
To manage our relationship with you, including sending service-related communications (legitimate interests).
To consider your application if you apply for a role with us (legitimate interests and, where applicable, legal obligation).
To send you relevant updates, insights or event invitations that may be of interest to you (legitimate interests, or consent where required by law).
To maintain the security and performance of our website and systems (legitimate interests and legal obligation).

We do not sell your personal data to third parties, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

5. Sharing Your Data

We may share your personal data with:

Our employees and consultants, on a need-to-know basis, in order to deliver our services.
Trusted third-party service providers (for example, IT providers, document storage services or professional advisors) who process data on our behalf and are contractually required to protect it.
Regulatory authorities, law enforcement agencies or courts where we are legally required to disclose information.
Prospective buyers or acquirers of our business, where a change of ownership requires data to be transferred as part of that transaction.

We require all third parties to respect the security of your personal data and to handle it in accordance with applicable data protection laws.

6. International Transfers

Our primary operations are based in the UK and Europe. Where it is necessary to transfer personal data outside the UK or European Economic Area, we will put in place appropriate safeguards, such as standard contractual clauses approved by the relevant supervisory authority, to ensure your data is protected to the same standard as within the UK. Please contact us if you would like further information about the safeguards we use.

7. Cookies

Our website uses cookies to support basic functionality and to help us understand how visitors use our site. Where required by law, we will ask for your consent before placing any non-essential cookies.

You can control or disable cookies at any time through your browser settings. Disabling certain cookies may affect the functionality of our website. If you have any questions about our use of cookies, please contact us at info@duneadvisors.com.

8. How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law or regulation. The retention period will depend on the nature of our relationship with you:

Enquiry or prospective client data: up to two years from last contact, unless you ask us to remove it sooner.
Client engagement data: for the duration of the engagement and for a reasonable period thereafter to meet legal and regulatory requirements, typically six years.
Candidate data: up to twelve months from the conclusion of a recruitment process, unless you consent to us retaining it longer for future opportunities.

Once the applicable retention period expires, we will securely delete or anonymise your data.

9. Your Rights

Under UK data protection law, you have the following rights in relation to your personal data:

Right of access: to receive a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to ask us to delete your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data while a complaint or query is being resolved.
Right to data portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object: to object to processing based on our legitimate interests, including direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@duneadvisors.com. We will respond within one month of receiving your request. There is no charge for making a request unless it is manifestly unfounded or excessive.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk. We would welcome the opportunity to address your concerns directly before you contact the ICO.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Access to personal data is restricted to those with a genuine need to know. We have procedures in place to respond to any suspected personal data breach, and we will notify you and the ICO where we are legally required to do so.

11. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the date at the top of this document when we do so. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Dune Advisors

33 Cavendish Square, London, W1G 0PW

Email: info@duneadvisors.com