Privacy notice
This notice explains what personal data we hold, why we hold it, and what you can do about it. It covers visitors to this website, people who enquire or book a call, our clients, and business contacts we approach directly.
Who is responsible for your data
Dinmore Bell operates through two entities. River Card Ltd, trading as Dinmore Bell (company number 15470153, registered at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF) is the controller for clients and contacts in the UK and Europe. Maurice James LLC-FZ, trading as Dinmore Bell International (company number 2645368, registered at Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates) is the controller for international clients and contacts.
Your engagement letter names which entity you contract with. If you are not a client, the controller is River Card Ltd unless you are based outside the UK and Europe.
For any question about this notice, or to exercise a right described below, contact us at privacy@dinmorebell.com. That includes any question about our registration with the Information Commissioner’s Office, which we will confirm on request.
What we collect, and why
We collect different data depending on how you interact with us. In each case we collect the minimum that lets us do the thing you have asked for, or the thing we have a legitimate reason to do.
- Website visitors
- Pages viewed, referring site, approximate location derived from IP address, and device and browser type. Analytics is only collected where you have consented; without consent we collect nothing beyond what is strictly necessary to serve the site securely.
- Enquiries and Scope Analysis bookings
- Your name, email address, company, telephone number where given, sector and headcount, and what you tell us is currently on your desk. We need this to hold the call, to prepare for it, and to send you the confirmation and the scope that follows.
- Clients
- Contact details for the people we work with, the matters we run, correspondence, and the records required to deliver and account for the engagement.
- Business contacts we approach
- Name, business role, business email address, employer, and publicly reported information about the business — a funding round, a senior hire, an expansion — together with the source we took it from. We record the source for every factual claim we make.
- Suppliers and partners
- Contact details and the records needed to manage the relationship.
The lawful bases we rely on
Where you enquire, book a call or become a client, we process your data to take steps at your request and to perform our contract with you.
Where we contact a business about our services, we rely on our legitimate interests in promoting a business-to-business professional service to the people likely to need it. We assess that interest against your rights before we contact you, we approach people in their business capacity only, and we record the basis for each contact. You can object at any time and we will stop — permanently.
Where we use analytics or any non-essential cookie, we rely on your consent, which you may withdraw at any time.
Where the law requires us to keep records, or to make a disclosure, we process on the basis of our legal obligations.
Where our information comes from
Most of the personal data we hold comes directly from you.
For business contacts we have not yet spoken to, information comes from sources that are public or professionally published: company websites, Companies House and equivalent registries, professional networking profiles, trade and financial press, and job advertisements. We do not buy consumer data, and we do not use data obtained in breach of any platform’s terms.
Who we share it with
We do not sell personal data and we do not share it for anyone else’s marketing.
We use a small number of service providers who process data on our instructions and under contract: our hosting and infrastructure providers, our database provider, our transactional email provider, our calendar provider, and our background job provider. Each is bound to process only as we instruct.
Where a matter requires regulated advice, we instruct specialists — solicitors, counsel, tax advisers, surveyors and others. We share only what the instruction needs, and we tell you when we do.
We disclose data where the law requires it, or to establish, exercise or defend legal claims.
International transfers
Dinmore Bell operates across the United Kingdom and the United Arab Emirates, and some of our service providers process data outside the UK.
The United Arab Emirates is not covered by a UK adequacy decision. Where personal data moves from the UK to our UAE entity, or to a provider outside the UK without adequacy, we put an appropriate safeguard in place — an International Data Transfer Agreement, or the UK Addendum to the European Commission’s standard contractual clauses — and we assess the transfer before it happens.
You may request a copy of the safeguard we rely on by contacting privacy@dinmorebell.com.
How long we keep it
We do not keep personal data longer than we need it.
Enquiries that do not become engagements are deleted after 24 months. Business contacts who have asked not to be contacted are kept on a suppression list indefinitely, because that is the only way to guarantee we do not contact them again — we keep the minimum needed to honour the objection and nothing else. Client records are kept for six years after the engagement ends, to meet limitation and professional record-keeping requirements.
Each record carries a retention date, and data is deleted when it is reached.
Your rights
Under UK GDPR you have the right to be told what we hold and to receive a copy; to have inaccurate data corrected; to have data erased in certain circumstances; to restrict how we use it; to receive it in a portable form; and to object to processing carried out on the basis of legitimate interests.
Where we rely on legitimate interests to contact you about our services, your right to object is absolute. Tell us and we will stop, and we will keep the minimum record required to make sure we do not start again.
Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect anything done before you withdrew it.
To exercise any right, email privacy@dinmorebell.com. We respond within one month. We may ask you to confirm your identity first, and we will not charge you unless a request is manifestly unfounded or excessive.
Security
Personal data is held in access-controlled systems, encrypted in transit and at rest. Access is limited to the people who need it, and every change to a record is logged with who made it and when.
We do not put personal data in web addresses, and we keep it out of our application logs.
Complaints
If you are unhappy with how we have handled your data, please tell us first at privacy@dinmorebell.com so that we can put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.
Changes to this notice
This notice was last updated on 17 August 2026. Where we make a material change we will say so on this page, and where the change affects processing we rely on your consent for, we will ask again.