Effective Date: August 2026

Principle 7 Global ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data obtained through our website and in connection with our investigative and related services.

We act as a data controller in respect of personal data processed through our website and in connection with our services.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).

Principle 7 Global provides investigative, case analysis, criminal appeal, CCRC and related services.

Due to the nature of our work, we may process personal data relating to clients, subjects of investigations, witnesses and other third parties.

Such processing may include the collection, examination, analysis and reporting of information necessary to fulfil client instructions and legitimate business purposes, always in accordance with applicable law.

We may collect, use, store and transfer the following categories of personal data:

• Identity Data: name, date of birth and identification documents where required.
• Contact Data: email address, telephone number and correspondence details.
• Case Data: information provided or obtained in connection with an investigation, case analysis, criminal appeal, CCRC matter or other enquiry.
• Assessment Data: name, email address, answers, results and other information submitted through our online investigative skills assessment.
• Technical Data: information concerning your use of our website, which may include browser type, device information, website usage, session information and other technical information.
• Communications Data: records of correspondence, enquiries and instructions.
• Third-Party Data: information relating to individuals connected with an investigation or other matter on which we are instructed.

In certain circumstances, information processed in connection with our professional services may include special category personal data, criminal offence data or other sensitive information where processing is lawful and necessary.

We may collect personal data through:

• Direct interactions, including website forms, online assessments, email and telephone.
• Client instructions and contractual engagements.
• Publicly available and open-source information.
• Third parties where obtaining the information is legally permissible.
• Automated technologies, including cookies and analytics technologies where appropriate consent has been obtained.

We process personal data only where we have a lawful basis for doing so. Depending upon the circumstances, this may include:

• Consent – where you have given clear consent for a particular purpose.
• Contractual necessity – where processing is necessary to perform a contract with you or take steps at your request before entering into a contract.
• Legal obligation – where processing is necessary to comply with a legal or regulatory requirement.
• Legitimate interests – where processing is necessary for our legitimate business or professional interests, provided those interests are not overridden by the rights and interests of the individual concerned.

Our legitimate interests may include providing investigative and case-analysis services, responding to enquiries, preventing or detecting fraud, establishing or protecting legal rights, maintaining appropriate business records and administering our business.

Where special category personal data or criminal offence data is processed, we will rely upon an appropriate additional condition under applicable data protection legislation where required.

We may use personal data for purposes including:

• Providing investigative, intelligence, case-analysis, criminal appeal and CCRC-related services.
• Assessing and managing client enquiries and instructions.
• Conducting investigations, research, due diligence and background enquiries where lawful and appropriate.
• Preventing and detecting fraud or unlawful activity.
• Establishing, exercising or protecting legal rights.
• Complying with legal and regulatory obligations.
• Communicating with clients and other relevant persons.
• Administering our online investigative skills assessment, recording assessment submissions and communicating with participants in relation to their assessment or result.
• Maintaining appropriate business and case records.
• Understanding use of our website and improving our website, content and services.

Where lawful and necessary, we may share personal data with:

• Law enforcement agencies, courts, regulatory authorities or other public bodies where required or permitted by law.
• Barristers, solicitors, experts and other legal or professional advisers.
• Service providers and contractors acting on our behalf.
• Clients where disclosure is necessary and lawful in connection with the services for which we have been instructed.
• Other persons where disclosure is necessary for the establishment, exercise or defence of legal claims or otherwise permitted by law.

We will not sell personal data to third parties.

All disclosures are made in accordance with applicable data protection legislation and, where appropriate, subject to contractual, confidentiality or other safeguards.

Some organisations providing technology or other services to us may process information outside the United Kingdom.

Where personal data is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection law. This may include reliance upon UK adequacy regulations, approved contractual safeguards or another legally recognised transfer mechanism.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Measures may include:

• Secure data storage systems.
• Appropriate access controls.
• Confidentiality procedures.
• Encryption and secure communications where appropriate.
• Limiting access to information to those who have a legitimate need to access it.

Although we take reasonable precautions to safeguard information, no electronic transmission or storage system can be guaranteed to be completely secure.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, taking account of:

• Legal and regulatory requirements.
• Contractual obligations.
• The nature and circumstances of the relevant investigation or case.
• The establishment, exercise or defence of legal claims.
• Legitimate administrative and business requirements.

Retention periods for investigative and case files may vary according to the nature of the matter and are therefore determined on a case-by-case basis.

Information submitted through our online investigative skills assessment will be retained only for as long as reasonably necessary to administer the assessment, maintain appropriate records and deal with any subsequent query relating to participation or results.

Information that is no longer required will be securely deleted, destroyed or anonymised where appropriate.

Subject to applicable law and any relevant exemptions, you may have rights including:

• The right to be informed about how your personal data is used.
• The right of access to your personal data.
• The right to request rectification of inaccurate or incomplete personal data.
• The right to request erasure of personal data in certain circumstances.
• The right to request restriction of processing in certain circumstances.
• The right to object to certain processing.
• The right to data portability where applicable.
• The right to withdraw consent where processing is based upon consent.

These rights are not absolute and may be restricted in certain circumstances.

In particular, exemptions or restrictions may apply to information processed for purposes connected with crime prevention or detection, legal proceedings, legal professional privilege, regulatory requirements or the rights and freedoms of other individuals.

Our website uses cookies and similar technologies. Some cookies may be necessary for the operation and security of the website, while others may be used for analytics purposes.

We use Google Analytics to help us understand how visitors use our website. This enables us to measure website traffic, understand which pages are visited, identify how visitors arrive at our website and improve our website, content and services.

Google Analytics may process information concerning a visitor's interaction with the website, including pages visited, session and interaction information, approximate geographic location, browser information and device information.

Analytics cookies and other non-essential tracking technologies will only be used where you have consented to them through our cookie banner.

When visiting our website, you may choose to Accept or Decline non-essential cookies.

Where Google Analytics is used, information may be processed by Google in accordance with Google's applicable privacy and data protection terms.

We do not intentionally send names, email addresses, case information or other information that directly identifies an individual to Google Analytics.

You may withdraw or change your cookie consent. Where the website does not provide a persistent cookie-preference control, you may clear cookies associated with our website through your browser. When you next visit the website, the cookie notice should be displayed again and you can make a new selection.

We periodically review the cookies and tracking technologies used by our website and may update this Privacy Policy where those technologies change.

Our website provides an optional online investigative skills assessment under our Test Your Skills section.

Where you choose to participate, we may collect your:

• Name.
• Email address.
• Assessment responses.
• Assessment result.
• Information necessary to administer or verify your participation and any certificate issued.

We use this information to administer the assessment, record submissions, provide or verify assessment results and certificates and, where appropriate, communicate with you concerning your participation.

Information provided for the purpose of completing the assessment will not be used for unrelated direct marketing merely because you have supplied an email address. Where consent is required for marketing communications, this will be obtained separately.

Participation in the assessment does not create a client relationship with Principle 7 Global and does not constitute an offer of employment or guarantee of suitability for employment as an investigator.

Assessment information will be retained only for as long as reasonably necessary for the purposes for which it was collected and for legitimate administrative and record-keeping purposes.

If you have any questions, requests or concerns concerning this Privacy Policy or the way in which we process your personal data, please contact:

Principle 7 Global

Email: info@p7-global.co.uk
Telephone: +44 7774 903148
Website: p7-global.co.uk

We may update this Privacy Policy from time to time to reflect changes in our services, website, technology, legal requirements or data-processing activities.

The current version will be published on this website and the effective date shown at the beginning of the policy will be updated where appropriate.

If you have concerns about our processing of your personal data, we would welcome the opportunity to address them directly.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Further information is available from the Information Commissioner's Office website.