Privacy Policy (GDPR Compliance)

Last updated: 21/01/2026

Prometheus Investigations (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Business name: Prometheus Investigations
Contact email: info@prometheusinvestigations.co.uk
Website: https://www.prometheusinvestigations.co.uk/
Data Controller: Prometheus Investigations

We act as a Data Controller for the personal data we collect and process.

2. Personal Data We Collect

We may collect and process the following types of personal data:

  • Name, address, email address, and telephone number

  • Details provided through enquiry or contact forms

  • Case-related information provided by clients

  • Identification documents (where legally required)

  • Communication records (emails, messages, call logs)

  • Technical data such as IP address, browser type, and device information

  • Evidence gathered during investigations (lawfully and proportionately)

3. How We Collect Personal Data

Personal data is collected when you:

  • Contact us via our website, email, or telephone

  • Engage our services

  • Submit an enquiry or request information

  • Provide information relevant to an investigation

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contractual necessity – to provide investigation services

  • Legal obligation – to comply with legal or regulatory requirements

  • Legitimate interests – for conducting investigations, fraud prevention, and protecting our business

  • Consent – where explicitly provided (e.g. marketing communications)

Where special category data is processed, this is done strictly in accordance with Article 9(2)(f) and Schedule 1 of the Data Protection Act 2018, relating to legal claims and investigative purposes.

5. How We Use Personal Data

We use personal data to:

  • Respond to enquiries

  • Provide investigative services

  • Conduct lawful surveillance and evidence gathering

  • Maintain accurate records

  • Comply with legal obligations

  • Protect our legal rights

  • Improve our website and services

We do not sell personal data to third parties.

6. Disclosure of Personal Data

We may share personal data with:

  • Legal representatives or courts (where required)

  • Law enforcement agencies (when legally obliged)

  • Professional advisors (e.g. solicitors, accountants)

  • Trusted subcontractors bound by confidentiality and GDPR obligations

All disclosures are lawful, proportionate, and strictly limited.

7. Data Retention

We retain personal data only for as long as necessary:

  • Case files: retained in line with legal and contractual requirements

  • Financial records: retained as required by HMRC

  • Enquiry data: retained for no longer than necessary

When data is no longer required, it is securely deleted or anonymised.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

  • Secure storage systems

  • Restricted access controls

  • Encryption where appropriate

  • Confidentiality obligations on staff and subcontractors

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of data (where applicable)

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent at any time (where consent applies)

Requests should be made in writing to the contact details above.

10. Right to Complain

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk
Telephone: 0303 123 1113

11. Cookies

Our website may use cookies to improve functionality and analyse traffic. You can control cookies through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.