Privacy Policy
This policy explains how Chapra & Co. collects, uses, shares and protects personal data in connection with chapraandco.com, our research distribution, our seminars and our correspondence, and the rights you have under the UK General Data Protection Regulation and the Data Protection Act 2018. It is written to be read: headings first, detail beneath.
01 / Who we are
Chapra & Co. (“the firm”, “we”, “us”) is an independent research and advisory practice, presently operating as a practice in formation while its corporate structure is completed. For the purposes of UK data protection law, Chapra & Co., acting through its Principal, is the controller of the personal data described in this policy.
30 St Mary Axe, London EC3A 8BF, United Kingdom
Upon completion of incorporation, this policy will be updated with the registered entity’s details and its Information Commissioner’s Office registration; that revision will be dated and noted on this page.
02 / The personal data we collect
We collect only information that you provide to us directly:
Your name, email address, organisation, and the content of your message, when you use the contact form or write to us.
Your email address.
Your email address, the paper you open, and whether you separately ask to receive research emails.
Your name, email address, firm and role.
The information reasonably necessary to perform the engagement, agreed with you at the outset.
We do not buy personal data, we do not scrape it, and we do not collect special category data.
03 / How we use it, and the lawful basis for each purpose
| Purpose | Data used | Lawful basis (UK GDPR, Art. 6) |
|---|---|---|
| Sending research and published revisions to subscribers | Email address | Consent, 6(1)(a); withdraw using the unsubscribe link in each research email or by replying “unsubscribe” |
| Providing requested online paper access | Paper access data | Legitimate interests, 6(1)(f) |
| Responding to correspondence and enquiries | Correspondence data | Legitimate interests, 6(1)(f) |
| Registering and running seminars, including joining details and the replay | Registration data | Performance of the arrangement you request, 6(1)(b); legitimate interests, 6(1)(f) |
| Performing advisory engagements | Engagement information | Contract, 6(1)(b) |
| Keeping records required by law, including tax and anti-money-laundering records where applicable | Relevant records | Legal obligation, 6(1)(c) |
We do not use personal data for automated decision-making or profiling, and we do not sell it to anyone.
04 / Who we share it with
- Service providers acting on our documented instructions: website hosting and content delivery, email delivery, and the seminar platform. Each is bound by a data-processing agreement.
- Professional advisers, insurers, regulators or courts, where the law requires or permits.
No one else.
05 / International transfers
Some providers process data outside the United Kingdom, including in the United States. Where they do, transfers rely on a UK adequacy decision, including the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses approved by the Information Commissioner, with supplementary measures where appropriate.
06 / How long we keep it
| Category | Retention period |
|---|---|
| Research subscription | Until you unsubscribe; thereafter suppressed to honour the opt-out |
| Paper access | Up to two years after access |
| Correspondence | Up to two years after the exchange closes, unless part of an advisory record |
| Seminar registrations | Twelve months after the session |
| Advisory engagement records | Six years after the engagement ends, reflecting limitation periods and regulatory expectations |
After these periods we delete or irreversibly anonymise.
07 / Your rights
Under UK data protection law you have the right to:
- request access to the personal data we hold about you;
- have inaccurate data rectified, and, in certain circumstances, erased;
- restrict our processing, and receive a portable copy of data you provided;
- object to processing based on legitimate interests, including any direct marketing, which we will stop without question;
- withdraw consent at any time where consent is the basis, without affecting prior processing.
To exercise any right, write to contact@chapraco.com. We respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113; we would welcome the opportunity to address any concern first.
08 / Cookies and our website
chapraandco.com sets no advertising or analytics cookies. Our hosting provider may set strictly necessary cookies for security and delivery, which require no consent under the Privacy and Electronic Communications Regulations. The site loads its typefaces from Google Fonts, which means your browser requests font files from Google servers and discloses your IP address to Google in doing so; blocking third-party fonts in your browser does not affect the site’s content.
09 / Security
Personal data is held in access-controlled systems with encryption in transit, restricted to the people who need it, which in a practice of this size is deliberately few. In the unlikely event of a breach creating risk to you, we will notify the Information Commissioner’s Office within 72 hours and affected individuals without undue delay, as the law requires.
10 / Children
Our website, research and services are directed at professionals and are not intended for anyone under 18. We do not knowingly collect children’s data.
11 / Changes to this policy
Changes will be posted on this page with a new effective date, and where a change materially affects how data already collected is used, subscribers will be told directly. As with the firm’s research, revisions are published, not quietly made.
Chapra & Co. is not authorised or regulated by the Financial Conduct Authority and does not provide regulated investment services. This document states the firm’s data-protection practice and does not constitute legal advice to any reader.