Privacy Policy
Effective Date: 1 April 2025

This Privacy Policy (“Policy”) sets forth the principles under which LeadStance International Ltd (“LeadStance International”, “LeadStance”, “we”, “us”, or “our”) processes Personal Data in the course of conducting its business as a provider of International Market Entry consulting and development services within the International Trade and Development sector.

LeadStance is committed to full compliance with applicable data protection and privacy legislation, including but not limited to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant international equivalents in jurisdictions in which we operate.

1. Data Controller and Contact Information
LeadStance International is the Data Controller in respect of all personal data collected and processed.
Contact: Data Protection Officer
Email: frontdesk@leadstance.co.uk
Address: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX

2. Scope of Policy

This Policy applies to all Personal Data collected through LeadStance’s websites, communications, consultations, and services, whether collected electronically, verbally, or in writing, and irrespective of the data subject’s country of residence.

3. Categories of Personal Data Processed

LeadStance may collect and process the following categories of Personal Data, subject to applicable lawful bases:

  • Identification and Contact Data: Full name, business title, email address, telephone number, company name, postal address.

  • Business and Operational Data: Information pertaining to your organisation’s structure, goals, market entry plans, compliance posture, or documentation submitted to us in the course of providing services.

  • Technical Data: Internet Protocol (IP) addresses, browser type, device identifiers, geographic location data, access logs, user activity on websites.

  • Communications Data: Records of communications, meeting notes, enquiries, contractual correspondence, and service-related feedback.

  • Special Category Data: Not actively collected. Where such data is processed, explicit consent will be obtained in advance, in accordance with Article 9 UK GDPR.

4. Legal Bases for Processing

Processing activities are carried out pursuant to one or more of the following legal bases:

  • Performance of a contract (Article 6(1)(b))

  • Compliance with legal obligations (Article 6(1)(c))

  • Legitimate interests (Article 6(1)(f))

  • Consent (Article 6(1)(a)), where applicable

Our legitimate interests include commercial operations, regulatory due diligence, business development, and market entry facilitation.

5. Purpose of Processing

LeadStance processes Personal Data for the following purposes:

  • Provision of international trade and market entry advisory services

  • Regulatory, ESG, and compliance consultancy

  • Client engagement, communications, and service execution

  • Due diligence on prospective clients, vendors, and strategic partners

  • Risk assessment, audit, and fraud prevention

  • Marketing and dissemination of sector-relevant insights (subject to consent)

  • Compliance with statutory and legal obligations across relevant jurisdictions

6. Data Sharing and Disclosures

LeadStance may disclose Personal Data, where necessary, to the following categories of third parties:

  • Independent contractors, consultants, and advisors retained by LeadStance

  • Regulatory authorities and competent enforcement agencies

  • External legal counsel, accountants, and insurers

  • Cloud storage and secure IT service providers

  • Partner organisations, only with the data subject’s prior consent

All third parties are bound by appropriate contractual safeguards, including Data Processing Agreements (DPAs) and confidentiality obligations, and are prohibited from using Personal Data for unauthorised purposes.

7. International Data Transfers

Where data is transferred outside the UK or EEA, LeadStance ensures compliance with Chapter V of the UK GDPR by relying on:

  • Adequacy decisions by the UK Government

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office

  • Binding corporate rules or other appropriate safeguards, as required

8. Data Retention

LeadStance retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. Specific retention periods include:

  • Client files: minimum six (6) years

  • Communications data: three (3) years from final contact

  • Marketing and consent records: retained until opt-out

Where applicable, data is securely deleted or anonymised upon expiry of the relevant retention period.

9. Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including but not limited to:

  • TLS/SSL encryption

  • Multi-factor authentication (MFA)

  • Access control and user permission management

  • Ongoing staff training on data protection principles

  • Periodic audits and penetration testing

10. Rights of the Data Subject

Data subjects have the following rights under the UK GDPR, subject to any exemptions or limitations provided by law:

  • Right to access (Article 15)

  • Right to rectification (Article 16)

  • Right to erasure (Article 17)

  • Right to restriction of processing (Article 18)

  • Right to data portability (Article 20)

  • Right to object to processing (Article 21)

  • Right to lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise any rights, contact frontdesk@leadstance.co.uk with sufficient identification.

11. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance user experience and perform website analytics. You may configure your browser to refuse cookies, although this may affect the functionality of the site. Full details are available in our Cookie Policy.

12. Children’s Data

Our services are not directed at individuals under the age of 16. We do not knowingly collect Personal Data from children.

13. Changes to this Policy

LeadStance reserves the right to modify or update this Privacy Policy at any time in compliance with legal obligations or internal operational changes. The latest version will be made available at www.leadstance.co.uk

14. Contact

For questions or concerns regarding this Policy or any aspect of our data processing practices, please contact:

Data Protection Officer
LeadStance International Ltd
Email: frontdesk@leadstance.co.uk
Address: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX

© 2025 LeadStance International Ltd. All rights reserved.