Privacy Notice
Last updated: 19th July 2026
DBIM takes data protection seriously - it's part of what we do for a living. This notice explains what personal data we collect, why we collect it, the legal grounds we rely on, who we share it with, how long we keep it, and the rights you have over it.
1. Who we are
DBIM Limited ("DBIM", "we", "us") is the data controller for the personal data described in this notice.
Registered in England and Wales, company number 16771428. Registered office: Bury, Greater Manchester, UK.
We are registered with the Information Commissioner's Office, registration number ZC039507. (Delete this line only if registration is genuinely not required — check first.)
For anything relating to this notice or your personal data, contact us at privacy@dbim.co.uk.
2. What we collect and why
Enquiries
When you contact us through this website, by email, or by phone, we collect your name, work contact details, and the content of your enquiry so that we can respond and follow up.
Lawful basis: legitimate interests - responding to and managing business enquiries.
The Standard - our monthly email briefing
If you subscribe to The Standard, we collect your first name and email address to send you the briefing once a month. Signups through our subscription page are confirmed by double opt-in, so we hold a record of your consent.
We also occasionally add existing business contacts - people we work with or have dealt with directly - where we believe the briefing is genuinely relevant to their role.
Lawful basis: consent where you have subscribed yourself, which you can withdraw at any time; legitimate interests where we have added you as an existing business contact - keeping the people we work with informed of regulatory developments relevant to their sector.
Either way, every issue carries a one-click unsubscribe link, and unsubscribing takes effect immediately. We use your details for nothing else - no promotions, and your address is never shared with or sold to third parties for their marketing.
Clients and prospective clients
When we scope or deliver consultancy work, we process contact details, correspondence, and the records needed to run the engagement, manage the relationship, and invoice for our services.
Lawful basis: performance of a contract; legal obligation (accounting, tax, and regulatory record-keeping); legitimate interests (managing client relationships).
Website analytics
This website collects information to power our site analytics, including information about your browser, network, and device; web pages you visited prior to coming to this website; and your IP address. It may also include details of your use of this website, including clicks, internal links, pages visited, scrolling, searches, and timestamps.
We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity. Analytics cookies run only when you acknowledge our cookie banner.
Lawful basis: consent, given through the cookie banner.
Website hosting
This website is hosted by Squarespace. Squarespace collects personal information when you visit this website - including information about your browser, network, and device, the pages you view, and your IP address - in order to run this website securely and to protect and improve its platform. You can read more in Squarespace's own privacy policy.
Lawful basis: legitimate interests - operating a secure, functioning website.
Fonts
This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To display the site properly, these providers may receive information about your browser, network, or device, the page you're viewing, and your IP address.
Lawful basis: legitimate interests - displaying this website correctly.
3. Cookies
This website uses cookies and similar technologies - small files or pieces of text that download to your device when you visit a website.
Necessary and required cookies are always used: they allow Squarespace, our hosting platform, to serve this website to you securely.
Analytics and performance cookies are used only when you acknowledge our cookie banner, to view site traffic, activity, and other data.
For details of the specific cookies used, see Link.
4. Who we share personal data with
We use a small number of service providers who process personal data on our behalf, under contract, and only on our instructions:
Squarespace - website hosting, web forms, and site analytics
MailerLite - delivery of The Standard email briefing
Xero - invoicing and accounting
We may also share personal data with our professional advisers where necessary, and with regulators, law enforcement, or other authorities where the law requires it.
We do not sell personal data. We do not share it with any third party for their own marketing.
5. International transfers
Some of our providers store or process data outside the UK. Where that happens, we rely on UK adequacy regulations (for example, for providers based in the EEA) or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
6. How long we keep personal data
The Standard subscribers: for as long as you're subscribed. If you unsubscribe, your address is kept on a suppression list so that we don't email you again.
Enquiries: up to 12 months after our last contact, where the enquiry doesn't lead to an engagement.
Client records: 6 years after the end of the engagement, in line with limitation periods and tax requirements.
Analytics data: held in line with Squarespace's retention practices.
7. Your rights
Under UK data protection law you have the right to:
access the personal data we hold about you
have inaccurate data corrected
have your data erased
restrict or object to our processing
receive your data in a portable format
withdraw consent at any time, where consent is the basis we rely on
To exercise any of these rights, contact us at [privacy contact]. We'll respond within one month.
If you're unhappy with how we've handled your personal data, you have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) — though we'd welcome the chance to resolve any concern with you directly first.
8. Changes to this notice
We'll post any changes on this page with a revised "last updated" date.