Policy dated July 2026

​

Modelling Expert Ltd ('we', 'us', 'our') is committed to protecting and respecting your privacy.

This policy (together with our Website Terms, our Terms and Conditions of Business, and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read it carefully to understand our views and practices regarding your personal data and how we will treat it.

​

The rules on processing personal data are set out in the UK General Data Protection Regulation ('UK GDPR') and the Data Protection Act 2018, each as amended, including by the Data (Use and Access) Act 2025.

 

This website is not intended for children and we do not knowingly collect data relating to children.

​

It is important that you read this policy together with any other privacy policy, notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you. This policy supplements those other notices and our Terms and Conditions of Business, and is not intended to override them.

​

1. Definitions

• Controller – a controller determines the purposes and means of processing personal data.

• Processor – a processor is responsible for processing personal data on behalf of a controller.

• Data subject – a natural person.

• Personal data – as defined in Article 4(1) of the UK GDPR, any information relating to an identified or identifiable natural person who can be identified directly or indirectly, in particular by reference to an identifier. Examples include name, passport number, home address or private email address. Online identifiers include IP addresses and cookies.

• Special category personal data – the UK GDPR refers to sensitive personal data as 'special categories of personal data' (Article 9). These include genetic data, and biometric data where processed to uniquely identify an individual, together with data revealing racial or ethnic origin, sexual orientation, health data, trade union membership, political opinions, and religious or philosophical beliefs.

• Processing – any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

• Third party – a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

​

2. Who we are

Modelling Expert Ltd is a company registered in England and Wales (company no 15861788). Our contact details are: Modelling Expert Ltd, 167–169 Great Portland Street, 5th Floor, London, W1W 5PF. For all data protection matters, contact Ben Ducker at ben.ducker@modellingexpert.co.uk or 07874 147 323.

​

Our role varies depending on the circumstances:

In most cases we act as a controller, meaning we decide how your personal data is processed and for what purposes. This applies to our own business records, our marketing, our website, and our dealings with contacts at client and prospective client organisations.

​

In relation to our anti-money laundering checks, we act as a joint controller with our anti-money laundering services provider. Details of the provider we currently use are available on request.

​

Sometimes we act as a processor. This happens where an organisation engages us and provides us with information that includes your personal data so that we can carry out work for them — for example, where your employer asks us to build a financial model and the underlying information includes staff or management details. In that situation the organisation that engaged us decides how your personal data is used and is the controller; we simply act on their instructions.

​

If you would like to know how your personal data is being used in those circumstances, or you wish to exercise any of the rights described in section 10, please contact the organisation that engaged us, whose own privacy information will apply. You are also welcome to contact us and we will pass your request on to them.

​

3. The purposes of processing your personal data

We use your personal data for the following purposes. If you are an employee of, or contractor to, a client company or a company involved in any project on which Modelling Expert Ltd is providing services, we will process your data in connection with the services we provide to our client. We may also process your data in order to provide marketing material promoting our services and to inform you of news, events or activities.

​

You may give us information about you by filling in forms on our website https://www.modellingexpert.co.uk, or on landing pages where you are accessing our online resources, or by corresponding with us by phone, email or otherwise. This includes information you provide when you register to use our site or to receive information from us, if you email us or are copied on emails to us, if you enter a competition, promotion or survey, register for an event or webinar, or participate in discussion groups on our site or on social media.

​

Cookies. Our website uses cookies. Some are necessary for the site to work. Others are used to understand how visitors interact with our website, so that we can improve it, and to recognise you when you return. Where cookies are not strictly necessary, we ask for your consent through the cookie banner shown when you first visit the site. You can change or withdraw your cookie preferences at any time using that banner, and you can also block or delete cookies through your browser settings. If you complete a form on our website, the cookies on that device may be associated with your contact details.

​

Opting out of marketing: you can ask us to stop sending you marketing messages at any time by following the opt-out links in any marketing message we send you.

​

4. The categories of personal data concerned

With reference to the categories described in section 1, we process the following categories of your data.

• Identity Data includes contact details (email address, company, role, phone number), IP address, information about the hardware and software used to access our website, and any other information you give us or that is given to us by a related party. We may also process your photograph, career history and publicly available information about you.

• Communications Data includes our communications with you by email, text, social media, telephone and any other means.

• Usage Data includes pages you have visited on our website, resources you have accessed and files you have downloaded, events you have registered for or attended, and other use of content we offer. This information will be associated with your IP address and, if you submit your contact details in a form, with your email address and other contact data.

• Client Materials may include personal data contained within documents, spreadsheets, models and other materials provided to us by a client or by a third party on a client's behalf, for the purpose of delivering our services. Where we process personal data of this kind we generally do so as a processor, as described in section 2.

 

We do not process special category personal data.

​

We obtain your personal data from you, or from one of our clients, prospective clients or someone connected with a project we are involved in, or from an enquiry made to us. We may also process data about you that is publicly available on social media, websites or in correspondence we receive.

 

5. Our legal basis for processing your personal data

Our lawful basis for processing your personal data depends on your relationship with us. The following lawful bases under Article 6 of the UK GDPR apply in the situations described.

​

• (a) Consent of the data subject. If you have told us that the email address you use to communicate with us is a personal (non-commercial) address, we ask for your consent to send you marketing information. You have the right to withdraw consent at any time using the preference links in every marketing email we send. Where you opt out of marketing, this will not affect personal data provided as a result of an enquiry, involvement in a client project, or another transaction. We also rely on your consent, given through our cookie banner, where we use cookies that are not strictly necessary, and you may withdraw that consent at any time as described in section 3.

• (b) Processing necessary for the performance of a contract with the data subject, or to take steps to enter into a contract. This will generally apply only where you engage us in your personal capacity rather than on behalf of an organisation.

• (c) Processing necessary for compliance with a legal obligation. This applies where we are required to identify you as part of our anti-money laundering due diligence or another regulatory obligation to which we are subject.

• (d) Processing necessary to protect the vital interests of a data subject or another person. Not applicable.

• (e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority. Not applicable.

• (f) Processing necessary for the purposes of our legitimate interests or those of a third party, except where overridden by the interests, rights or freedoms of the data subject. This applies if you are an employee of, or contractor working for, a client, or are involved in a project we are working on, or have completed forms to download content (including software) from our website, or have registered for an event or webinar organised by Modelling Expert Ltd. Our legitimate interest is in processing your data in connection with the delivery of our services and for business development purposes. If you use a personal email address in relation to a client project, an enquiry, to download content or to register for an event, we will treat it as a commercial email address and this legitimate interest basis will apply.

 

Where we act as a processor on a client's instructions, the lawful basis for that processing is determined by the client as controller.

Further information on lawful processing is available on the ICO website.

 

6. Use of technology

We use a range of software tools, including tools that use artificial intelligence, to support the delivery of our services and the running of our business. Examples include tools that help us build and review financial models, and tools that produce transcripts and notes from meeting recordings.

 

Where such tools are used, we contract with the providers on terms which require that personal data is not used to train their artificial intelligence models, that it is held only for as long as needed to provide the service and is then deleted, and that the provider keeps it confidential. We review all output produced with the assistance of these tools before it is used or issued.

 

7. Sharing your personal data

Your personal data will be treated as strictly confidential and will be shared only with:

• our advisers, including legal, technical, IT, financial, HR and other business advisers;

• our cloud software and hosting providers;

• providers of software and technology services, including artificial intelligence tools, as described in section 6;

• our anti-money laundering services provider;

• our email marketing and website analytics providers; and

• subcontractors engaged to assist in the delivery of our services, where applicable.

 

Details of the specific providers we currently use are available on request.

​

All such parties are required to keep your personal data confidential and to process it only in accordance with our instructions or, where they act as controllers in their own right, in accordance with applicable data protection law.

​

We may also disclose your personal data where required to do so by law or regulation, or where necessary to establish, exercise or defend legal claims.

​

8. How long we keep your personal data

Where we act as a controller, we retain personal data for as long as is necessary for the purposes for which it was collected, and thereafter for such period as we consider reasonable or as required by law. In relation to engagement records, our general policy is to retain files and papers for a period of not less than six years, consistent with our Terms and Conditions of Business, after which we may delete or destroy them.

​

Marketing data is retained until you ask us to stop sending you marketing messages, or until we consider the data no longer current.

​

Where we act as a processor on a client's instructions, we retain personal data in accordance with those instructions and will delete or return it at the client's request following completion of the relevant engagement, unless we are required by law to retain it.

​

You may ask us to delete your personal data at any time. We will do so unless we are required to retain it by law, or it is reasonably required in connection with the establishment, exercise or defence of legal claims.

​

9. Providing us with your personal data

Unless you are a signing authority acting on behalf of a client, you are under no statutory or contractual requirement to provide us with your personal data. However, if you do not do so, we may be unable to enter into a contract with the organisation you represent.

​

10. Your rights

Unless subject to an exemption under the UK GDPR, you have the following rights in respect of your personal data:

• the right to request a copy of the personal data we hold about you;

• the right to request that we correct any personal data found to be inaccurate or out of date;

• the right to request that your personal data is erased where it is no longer necessary for us to retain it;

• the right to withdraw your consent to the processing at any time, where consent is our lawful basis for processing;

• the right to request that we provide you with your personal data and, where possible, transmit it directly to another controller (the right to data portability), where the processing is based on consent or is necessary for the performance of a contract with you and is carried out by automated means;

• the right, where there is a dispute about the accuracy or processing of your personal data, to request that a restriction is placed on further processing; and

• the right to object to the processing of your personal data, where processing is based on legitimate interests, for direct marketing, or for the purposes of scientific or historical research and statistics.

 

Where we act as a processor rather than a controller, we will refer your request to the relevant client and assist them in responding to it.

​

11. Transfers of personal data outside the United Kingdom

Some of our service providers are based outside the United Kingdom, so their processing of your personal data may involve a transfer of that data overseas.

​

Where we transfer personal data out of the United Kingdom, we ensure a similar degree of protection is afforded to it by relying on one of the following safeguards:

• transfer to a country that the UK Government has determined provides an adequate level of protection for personal data;

• use of the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses; or

• another transfer mechanism permitted under Chapter V of the UK GDPR.

 

Further detail on the safeguards applying to a particular transfer is available on request.

​

12. Automated decision making

We use software tools, including artificial intelligence, to support the delivery of our services, as described in section 6. All output is subject to human review.

 

We do not make decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing within the meaning of Article 22 of the UK GDPR.

​

13. Further processing

If we wish to use your personal data for a new purpose not covered by this policy, we will provide you with a new notice explaining that use before we begin the processing, setting out the relevant purposes and processing conditions.

​

14. Changes to this privacy policy

Any changes we make to this privacy policy will be posted on this page and, where appropriate, notified to you by email. Please check back periodically to see any updates or changes.

​

15. How to make a complaint

To exercise any of your rights, or to raise a query or complaint, please contact Ben Ducker in the first instance at ben.ducker@modellingexpert.co.uk or 07874 147 323.

​

If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioner's Office on 0303 123 1113, via ico.org.uk, or by writing to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.