Privacy Policy

Who we are

We are Randall Thorp LLP (company number: OC364522) ("we", “our” or “us”) and we are committed to protecting and respecting your privacy. This privacy notice will tell you how we look after your personal data and your privacy rights and how the law protects you. 

We have included this Privacy Policy on our website for ease of reference, however the information set out in this policy applies to you if:

·         you (or your business/employer) are (or have been) our client

·         if you have made an enquiry or registered an interest in respect of our services

·         if you (or your business/employer) supplies products or services to us

·         if you use our website, www.randallthorp.co.uk (“website”) or engage with us on social media.

We act as data controller in respect of your personal data and are responsible for your personal data.

How to contact us

You can contact us by email to mail@randallthorp.co.uk or by post to Randall Thorp LLP, Beehive Lofts, Beehive Mill, Jersey Street, Manchester, M4 6JG. We ask that you label all emails with the subject heading “data protection” to ensure that these are picked up by the appropriate person.

What personal data to we hold about you?

We have set out below details of the personal data we may hold about you. Please note that this has been separated into categories depending upon the relationship we have with you.

If you (or your business/employer) are or have been our client

  • Your full name, email address, postal address (including postcode), telephone number(s), correspondence between us, details of your engagement with direct marketing emails we send, and photographs of you where you have consented to them being taken.

  • If we contract with you directly rather than your business/employer, your bank account details, details of the project for which we have been engaged, and details of plans and designs we have created for you or your project.

  • If we contract with your business/employer, details of your business/employer, job title, and working hours and days.

If you have made an enquiry or registered an interest in our services

  • Your full name, email address, postal address (including postcode), telephone number(s), and correspondence between us.

  • If your enquiry relates to your personal project, our proposals for your project.

  • If you enquire on behalf of your business/employer, details of your business/employer, job title, and working hours and days.

If you (or your business/employer) supply products or services to us

  • Your full name, email address, postal address, telephone number(s), and correspondence between us.

  • If you supply products or services to us personally or as a sole trader, your bank account details.

If you engage with us on social media

We may hold your social media handle or name and any message you post to our social media accounts.

Please let us know if your personal data changes. It is important that the personal data we hold about you is accurate and current. You can notify us using the contact details in this notice.

How we collect and use your personal data, and our lawful bases

We will only use your personal data when the law allows us to. The sections below explain how we collect your personal data, how we use it and the lawful basis we rely on for each use.

Clients and former clients

Contact details, project information, business details and correspondence

This includes your full name, email address, postal address and telephone number, which you provide to us when we engage you or your business/employer as our client; details of your project and the plans and designs we create for it as part of our services to you; details of your business/employer, your job title and your working hours and days, collected during our commercial relationship with your business/employer; and correspondence between us, collected during our commercial relationship with you.

We use this information to carry out our commercial relationship with you or your business/employer and to supply our products and services. We may also use your contact details to provide updates about our services and the terms on which we provide them, and your email address to send you details of our latest news and updates which we think may be of interest to you.

Where we contract with you directly, our lawful basis is performance of our contract with you. Where our contract is with your business/employer, our lawful basis is that this processing is necessary for our legitimate interests in providing our services to our clients.

Where we provide services to you for your personal project, we will only send you our latest news and updates with your consent. Where we provide services to you or your business/employer for a business project, our lawful basis for sending you our latest news and updates is our legitimate interests in keeping our clients updated about our business so that they remain clients of the firm.

After our relationship ends, we may retain this information in accordance with our retention policy to comply with legal obligations and, where necessary, for our legitimate interests in establishing, exercising or defending legal claims.

Bank account details

We retain your bank account details when you make a payment to us. Where necessary, we process them to return money paid to us incorrectly or which is no longer due. Our lawful basis is performance of our contract with you.

Photographs

We may use photographs of you taken at awards ceremonies and similar events for internal and external promotional purposes. We will only use photographs of you in this way if you consent.

Engagement with direct marketing emails

We may use details of your engagement with any direct marketing emails we send you to measure engagement, inform our marketing strategy and improve the effectiveness of our marketing communications. Our lawful basis is that this processing is necessary for our legitimate interests in understanding the effectiveness of our marketing so that we can improve it and grow our business.

Enquiries and prospective clients

Contact details, business details, correspondence and proposals

This includes your full name, email address, postal address (including postcode), telephone number(s), details of your business/employer, your job title and your working hours and days, collected when you make your enquiry or register your interest and/or during the course of our proposals to you. It also includes correspondence between us and our proposals for your project, collected during the course of our proposals to you.

We use this information to deal with your enquiry or registration of interest and, where applicable or requested, to provide proposals for the services we can offer. We may also use your email address to send you details of our latest news and updates which we think may be of interest to you.

Our lawful basis is that this processing is necessary for our legitimate interests in selling our services to potential new clients. Where your enquiry relates to services for your personal project, we will only send you our latest news and updates with your consent.

Suppliers

Contact details and correspondence

This includes your full name, email address, postal address and telephone numbers, which you provide to us when we engage you or your business/employer as a supplier, and correspondence between us, collected during our relationship with you or your business/employer.

We use this information to carry out our commercial relationship with you or your business/employer. Where we contract with you directly, our lawful basis is performance of our contract with you. Where our contract is with your business/employer, our lawful basis is that this processing is necessary for our legitimate interests in dealing with our suppliers.

After the relationship ends, we may retain this information in accordance with our retention policy to comply with legal obligations and, where necessary, for our legitimate interests in establishing, exercising or defending legal claims.

Supplier bank account details

We collect your bank account details from you as our supplier and, if you are a sole trader, use them to make payment for services provided. Our lawful basis is performance of our contract with you and, after the contract ends, compliance with our legal obligations.

Website and social media

We may use your social media handle or name, other profile information from your social media profile, and any messages you post to our social media accounts to respond to communications you make through those accounts. Our lawful basis is that this processing is necessary for our legitimate interests in engaging with our clients and potential clients.

Disclosures of your personal data

We may share your personal data with selected third parties so that they can provide services to us, including:

  • our software providers, including Union Square and Sage Group Plc;

  • our email service provider, Microsoft Outlook;

  • our data storage provider, Dropbox;

  • our IT service provider, Amshire Solutions Limited; and

  • our professional advisers, including lawyers, accountants, insurers and banks.

Required disclosures to third parties

We may disclose personal data to third parties where required:

  • if we sell or buy any business or assets, to the prospective seller or buyer;

  • if we or substantially all our assets are acquired by a third party, in which case personal data we hold about our customers will be one of the transferred assets;

  • if we are under a duty to disclose or share personal data to comply with a legal obligation, enforce or apply a contract between you (or your employer/business) and us, or protect the rights, property or safety of Randall Thorp LLP, our clients or others; or

  • to HM Revenue & Customs, regulators and other authorities that require the information for any purpose.

Where we store your personal data

We will not transfer any personal data we collect from you to a destination outside the European Economic Area, other than in accordance with the requirements of data protection laws.

How we protect your data

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These include:

  • password protection;

  • restricting access on our systems to employees, agents and contractors who need to know the information;

  • remote backups; and

  • confidential disposal of paper records.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data transmitted to our website, and any transmission is at your own risk.

How long we store your personal data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting or reporting requirements.

When determining an appropriate retention period, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for processing, whether those purposes can be achieved by other means, and applicable legal requirements.

Our retention periods are as follows:

  • Enquiries or expressions of interest: where we do not have a business relationship with you or your business/employer, we keep your personal data for 12 months after we finish dealing with your enquiry.

  • Clients: we keep your personal data for the period during which we supply our services to you or your business/employer and for up to six years afterwards.

  • Suppliers: we keep personal data collected about you for the period during which we receive products or services from you or your business/employer and for up to five years afterwards.

  • Social media: we do not retain (other than within our own social media profile) or export to our systems any personal data we obtain from your social media profile for any purpose.

Your rights in respect of your personal data

You have the following rights in respect of the personal data we hold about you:

  • the right to access a copy of your personal data;

  • the right to object to processing based on our legitimate interests where it is likely to cause, or is causing, damage or distress;

  • the right to object to processing for direct marketing;

  • in certain circumstances, the right to have inaccurate personal data rectified, blocked or destroyed;

  • the right, in certain circumstances, to request restriction of processing;

  • in certain circumstances, the right to request that your personal data be transferred to you or another provider; and

  • the right to request erasure of the personal data we hold about you.

If you wish to exercise any of these rights, please contact us using the details in this notice. The wording of this section should be checked against current data protection requirements.

Third-party websites and applications

Our website may contain links to and from third-party websites or applications. Those websites or applications may have their own privacy policies, for which we do not accept responsibility or liability. Please check their policies before submitting personal data to them.

Changes to this privacy notice

Any changes we make to this privacy notice in the future will be posted on our website and notified to you the first time you access the website following the change.

Your right to make a complaint

You have the right to complain about our use of your personal data. If you are a UK resident, your complaint should be addressed to the Information Commissioner’s Office (ICO) at www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns first, so please contact us before you escalate your complaint.

Cookies

Our website uses cookies and similar technologies to help it operate securely and effectively. Cookies are small text files stored on your device when you visit a website.

Necessary cookies

Our website uses cookies that are necessary for the website to function properly and securely, including to remember your cookie preferences. These cookies do not require consent where they are strictly necessary for the service you have requested.

Other cookies

Our website may use non-essential cookies or similar technologies for additional functionality. Where consent is required, these technologies will only be used after you have given your consent through our cookie banner.

Managing your preferences

When you visit our website, you can accept or decline non-essential cookies or manage your preferences using the cookie banner. You can also revisit your cookie preferences using the cookie settings option on our website, where available.

For further information about the cookies used by our website platform, please see Squarespace's guide to the cookies it uses.

If you have any questions about our use of cookies, please contact us at mail@randallthorp.co.uk.

Contact us about your personal data

Questions, comments and requests regarding this privacy notice are welcome and should be sent to mail@randallthorp.co.uk or by post to Randall Thorp LLP, Beehive Lofts, Beehive Mill, Jersey Street, Manchester M4 6JG.

Notice last updated: November 2026.