Privacy Policy

At Thunderbolt Union Limited, your privacy is of paramount importance. This Privacy Policy outlines how we collect, use, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

**Information We Collect**  
- **Personal Data**: Name, contact details (address, email, telephone), and billing information provided when you engage our services, subscribe to newsletters, or request proposals.  
- **Technical Data**: IP address, browser type, operating system, and browsing behaviour collected via cookies and similar technologies on our website.  
- **Usage Data**: Information on your interactions with our digital platforms, including pages viewed, links clicked, and time spent on pages.

**How We Use Your Data**  
- **Service Delivery**: To fulfil contractual obligations, provide financial advisory, intermediation, and IT management services.  
- **Communications**: To respond to enquiries, send service updates, and deliver marketing material where consent has been provided.  
- **Improvement**: To analyse trends, enhance website functionality, and develop new services suited to your needs.

**Legal Basis for Processing**  
- **Contractual Necessity**: Processing required to perform our service agreement with you.  
- **Consent**: Where you have explicitly agreed to marketing communications or cookies.  
- **Legal Compliance**: For compliance with UK tax, financial and statutory reporting obligations.

**Data Sharing and Disclosure**  
We do not sell or rent your personal data. We may share data with:  
- **Regulatory Authorities**: As required by law or in response to legitimate requests.  
- **Service Providers**: Third-party vendors (e.g., cloud hosting, payment processors) under strict confidentiality agreements.  
- **Professional Advisors**: Legal, auditing, or other consultants engaged in compliance or service enhancements.

**Data Retention**  
Personal data is retained only as long as necessary to fulfil our contractual and legal obligations, typically for a period of six years post-engagement, unless a longer retention period is legally required.

**Your Rights**  
Under UK GDPR, you have the right to access, correct, or delete your personal data, restrict processing, object to processing, and request data portability. To exercise these rights, please contact our Data Protection Officer at dataprotection@thunderboltonion.com.

**Cookies and Tracking**  
We use essential, performance, and analytics cookies. You may manage or disable cookies via your browser settings; however, this may affect website functionality.

**Security Measures**  
We implement appropriate technical and organisational controls—such as encryption, access controls, and regular security assessments—to protect personal data against unauthorised access, disclosure, or loss.

**Updates to This Policy**  
We may update this policy periodically. The latest version will be published on our website with the effective date clearly indicated.