Privacy Policy

Last updated: September 2026

Who we are

Aldercrest Compliance Group Ltd (“Aldercrest”, “we”, “us”) is a company registered in England and Wales (company number 17113308). Our registered office is c/o Portland Oxford Limited, Worton Park, Witney, Oxfordshire, OX29 4SU. We are the data controller for the personal data we collect and use through this website and as part of our business acquisition activities.

You can contact us about this policy or the way we use your personal data at any time by emailing acquisitions@aldercrest-compliance.co.uk, by telephone on 01865 570337 or by post to the address above.

What personal data we collect

Information you provide to us

When you contact us through this website, by email, telephone or otherwise, we collect the information you choose to give us. This may include your name, company name, job title or role, telephone number, email address, preferred contact time and anything you include in your message or subsequently provide to us.

Information obtained from publicly available sources

As part of our acquisition activities, we may identify businesses that could be suitable for Aldercrest and obtain limited information about their owners, directors or other relevant business contacts from publicly available sources.

This may include sources such as Companies House, company websites, publicly available business directories, professional profiles and other publicly accessible business information, including business information providers that compile data from these sources.

The information we collect may include:

• your name;
• your position, directorship, ownership or relationship with a business;
• your business name and address;
• publicly available business telephone numbers and email addresses; and
• publicly available information about the business that is relevant to our acquisition criteria.

We use this information solely in a business context and do not intentionally collect special category personal data for the purpose of making an initial acquisition approach.

If we have contacted you using information obtained from a public source and you would like to know where we obtained your details, please contact us at acquisitions@aldercrest-compliance.co.uk.

Website information

We also collect limited technical information automatically when you visit the site, such as your IP address, browser type and pages visited, through cookies and similar technologies. See our Cookie Policy for details.

How we use your personal data

We use personal data to:

• respond to enquiries you make to us;
• identify businesses that may fit Aldercrest’s acquisition criteria;
• contact business owners, directors or other appropriate business contacts about a possible acquisition;
• have confidential discussions about a potential acquisition;
• assess, negotiate and, where appropriate, complete a potential transaction;
• communicate with our professional advisers where necessary in connection with a potential transaction;
• maintain appropriate business and transaction records; and
• comply with our legal obligations.

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on you.

Our lawful basis for processing

Where you contact us, our lawful basis for processing your information will usually be our legitimate interests in responding to your enquiry and, where discussions progress, taking steps at your request prior to entering into a contract.

Where we identify and contact a prospective business owner using information obtained from publicly available sources, we rely on our legitimate interests.

Our legitimate interest is in identifying and contacting owners of established businesses that may be suitable for acquisition by Aldercrest and opening a direct and confidential conversation with those who may be considering a sale, retirement, succession or change of direction.

We seek to use only information that is relevant to this purpose and that has been made publicly available in a business or professional context. We consider the nature of the information, the way it was obtained and the likely impact on the individual when deciding whether its use is appropriate.

Where discussions progress towards a transaction, we may also process personal data where necessary to take steps at your request before entering into a contract, to perform a contract or to comply with a legal obligation.

Your right to object to acquisition approaches

You can ask us at any time not to use your personal data for further acquisition approaches.

Where our acquisition communications constitute direct marketing, you have an absolute right to object to the use of your personal data for that purpose. If you object, we will stop using your information for further acquisition approaches.

You can object by emailing acquisitions@aldercrest-compliance.co.uk, by telephoning 01865 570337, by writing to us at the address above or by using the contact details contained in any communication you receive from us.

If you ask us not to contact you again, we may retain the minimum information necessary on a suppression or “do not contact” list. This information is retained solely so that we can respect your request and avoid contacting you again inadvertently.

Who we share it with

Access to information relating to enquiries and prospective acquisitions is limited to those within Aldercrest who need it for that purpose.

We may share your information with professional advisers, such as solicitors or accountants, where a potential transaction progresses and only where reasonably necessary and subject to appropriate confidentiality obligations.

We may also use service providers that process personal data on our behalf, such as printing and mailing services used to send our letters, customer relationship management (CRM) software, IT, communications, hosting or other business services. They act only on our instructions and under contracts that require them to keep your information secure.

We do not sell your personal data or share it with third parties for their own marketing purposes.

International transfers

We do not transfer your personal data outside the UK unless an appropriate legal mechanism or safeguard is in place as required by UK data-protection law.

How long we keep it

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.

If we contact you about a potential acquisition and no conversation or transaction develops, we will normally delete or anonymise your prospect information within 12 months of our last contact with you.

If you contact us or enter into discussions with us but those discussions do not lead to a transaction, we will normally delete or anonymise information that we no longer require within 12 months of our last contact with you.

Where a transaction proceeds, we retain relevant records for as long as required for legal, accounting, tax, contractual or other legitimate business purposes.

If you have asked us not to contact you again, we may retain the minimum information required on our suppression list for as long as reasonably necessary to ensure that your request continues to be respected.

Your rights

Under UK data-protection law (the UK GDPR and the Data Protection Act 2018), depending on the circumstances, you may have the right to:

• ask for access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your personal data;
• ask us to restrict the way we process your personal data;
• object to processing based on our legitimate interests;
• object at any time to the use of your personal data for direct marketing; and
• receive certain personal data in a portable format where the right to data portability applies.

These rights do not apply in every circumstance and some are subject to legal limitations.

To exercise any of these rights, to object to further contact, or to ask where we obtained your information, email acquisitions@aldercrest-compliance.co.uk or telephone 01865 570337.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first by emailing acquisitions@aldercrest-compliance.co.uk with the subject line “Data protection complaint”, by telephone or by post. We will acknowledge your complaint within 30 days, look into it without undue delay and let you know the outcome.

If you remain unhappy, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Security

This website is served over HTTPS, and access to personal data is restricted to those who need it for legitimate business purposes.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss or misuse.

Changes to this policy

We may update this policy from time to time, including where our acquisition activities, systems, service providers or legal obligations change.

The date at the top of this page shows when it was last revised.