1. Introduction & Data Controller Overview
Watson Capital Partners ("WCP", "we", "us", or "our") operates as a private UK investment firm acquiring and developing established small and medium-sized enterprises. We acquire controlling equity stakes directly from founders and business owners seeking confidential succession and long-term capital stability.
We treat confidentiality and data protection as the cornerstone of our principal investment model. This Privacy Policy details how we collect, use, store, and safeguard personal and commercial data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Key Principle: Watson Capital Partners is not a public brokerage platform. We never broadcast company names, addresses, or confidential details publicly, and we never sell personal information to third-party commercial marketing brokers.
2. Lawful Bases for Data Processing
Under Article 6 of the UK GDPR, we process personal information strictly where justified by one or more of the following lawful bases:
- Legitimate Interests (Article 6(1)(f)): To identify potential succession candidates and direct acquisition opportunities across the UK Companies House register, conducting discreet business-to-business corporate outreach to company directors. We have conducted a Legitimate Interests Assessment (LIA) confirming that our outreach is targeted, non-intrusive, and balanced against individual privacy rights.
- Contractual Performance (Article 6(1)(b)): To execute bilateral transaction discussions, enter into mutual non-disclosure agreements (NDAs), and progress diligence between verified principals.
- Consent (Article 6(1)(a)): Where you proactively submit confidential enquiries via our website or direct contact desk.
- Legal Obligation (Article 6(1)(c)): To maintain statutory accounting records and comply with anti-money laundering (AML) and counter-terrorist financing obligations where applicable.
3. Information We Collect
We collect and process the following categories of information:
A. Inbound Enquiry Information
- Name, business email address, phone number, and corporate role.
- Entity name, primary trading sector, geographical region, and estimated financial scale (Turnover, EBITDA brackets).
- Transaction parameters (succession timeline, retirement horizon, full buyout vs partial equity rollover).
B. Public Registry & Commercial Intelligence
- Information publicly filed at Companies House (registered company numbers, incorporation dates, filed statutory accounts, director appointments, PSC shareholding records).
- Corporate website information, published press announcements, and industry trade accreditations.
C. Technical & Website Usage Data
- IP address, browser type, referral source, page interaction timestamps, and device parameters collected strictly via essential and anonymised analytics cookies.
4. Strict Non-Disclosure & Confidentiality Protocol
Commercial confidentiality is vital in corporate acquisitions to protect employee stability, customer relationships, and competitive advantage. We enforce the following rigorous safeguards:
- Executed Mutual NDAs: Full corporate identity, filed accounts, and operational data are reviewed exclusively after executing our legally binding Mutual Non-Disclosure Agreement.
- No Public Broadcasts: We never list companies on public business-for-sale portals, auction boards, or commercial directories.
5. Data Security, Storage & Retention
All digital records, diligence documents, and enquiry submissions are protected using industry-standard AES-256 bit encryption at rest and transmitted using secure TLS 1.3 protocols. Data is hosted in tier-4 UK and EEA sovereign data centres.
Retention Schedules: Specific data retention periods are agreed on a transaction-by-transaction basis between the parties, open to mutual discussion, while respecting applicable statutory requirements under English law. Inactive enquiries or contact records can be reviewed, amended, or erased at any time upon request.
6. Your UK GDPR Statutory Rights
As a data subject in the United Kingdom, you maintain statutory rights under Chapter III of the UK GDPR:
- Right of Access: Request confirmation and a copy of all personal data held about you (Subject Access Request).
- Right to Rectification: Request correction of inaccurate or incomplete corporate contact data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where there is no overriding statutory obligation for retention.
- Right to Object & Opt-Out: Object at any time to our business-to-business correspondence. Every direct communication from Watson Capital Partners contains an instant, one-click opt-out mechanism.
- Right to Restriction of Processing: Request suspension of processing under specific legal disputes.
7. Contact the Compliance Desk & Supervisory Authority
To exercise any of your data protection rights, or if you have questions regarding our confidentiality protocols, please contact our Senior Data Protection Officer:
Compliance & Data Governance Desk
Watson Capital Partners
Email: cyrus@watsoncapitalpartners.com
Response Time: Within two business days.
If you are not satisfied with our response, you have the right to lodge a complaint with the UK supervisory authority: The Information Commissioner's Office (ICO) at ico.org.uk or via helpline 0303 123 1113.