Your Privacy, Our Priority at Royal Spade Collective
Your privacy and data security are fundamental to our professional relationship. At Royal Spade Collective, we are committed to protecting your information and respecting your privacy rights. Learn how our commitment to data integrity and GDPR compliance forms the cornerstone of our operations.

Privacy Policy Overview and Commitment
Royal Spade Collective maintains the highest standards of data protection and privacy compliance, ensuring client information, research data, and personal details are securely managed. Our stringent protocols are in accordance with the General Data Protection Regulation (GDPR) and all applicable UK data protection regulations.
This policy outlines our practices concerning your personal data, covering all interactions with our website, direct services, and business engagements. We are committed to transparency and regular review of our policies to ensure continued compliance and adherence to best practices in an evolving digital landscape.
- Full GDPR compliance with transparent data collection and usage policies
- Secure data storage and transmission protocols protecting sensitive historical research information
- Clear privacy rights explanation with easy exercise of data subject rights
- Regular privacy policy updates reflecting current legal requirements and best practices
For any questions regarding this policy or your data, please contact our Data Protection Officer at [email protected].
Data Collection and Usage Practices
We collect and process personal data only when necessary and with clear legal bases. This includes information essential for delivering our services, improving your experience, and fulfilling legitimate business interests while safeguarding your rights.
When you visit our website, we may collect non-personally identifiable information through cookies and analytics tools (e.g., Google Analytics) to understand usage patterns, improve site functionality, and track marketing campaign effectiveness. This includes IP addresses, browser types, referral sources, and pages viewed. You have control over cookie preferences as detailed in our Cookies and Tracking section.
For project delivery and communication, we collect data such as names, contact details, organization information, and project specifications. This data is used solely for the purpose of fulfilling our contractual obligations, providing requested services, and maintaining our professional relationship. Special attention is given to the handling of sensitive historical materials and archival information, ensuring their confidentiality and integrity.
We may use your contact information for marketing communications if you have explicitly opted-in to receive them. You retain the right to opt-out at any time via the unsubscribe link in our emails or by contacting us directly.
We do not sell your personal data. Data may be shared with trusted third-party service providers (e.g., cloud hosting, payment processors) only when necessary for service delivery, and under strict data processing agreements ensuring GDPR compliance. Our primary legal bases for processing data are contractual necessity, legitimate interests, and explicit consent where required.
Data Security and Protection Measures
Protecting your data is paramount. Royal Spade Collective employs a robust suite of technical and organizational measures designed to prevent unauthorized access, disclosure, alteration, or destruction of your personal information.
Technical Safeguards
We utilize industry-standard encryption (SSL/TLS) for data in transit, secure servers, access controls, and regular vulnerability scanning. Our systems are designed with data protection by design and by default principles.
Organizational Controls
Access to sensitive data is strictly limited to authorized personnel on a 'need-to-know' basis. All staff undergo regular data protection training, reinforcing our commitment to privacy.
Incident Response & Retention
We have established clear protocols for detecting, assessing, and responding to data breaches, including prompt notification where legally required. Data is retained only for as long as necessary for the purpose for which it was collected, and then securely disposed of.
International Data Transfers
For global clients, any international transfers of personal data are conducted in full compliance with GDPR, utilizing approved mechanisms such as Standard Contractual Clauses to ensure equivalent protection.
Your Privacy Rights and How to Exercise Them
Under GDPR, you have significant rights regarding your personal data. Royal Spade Collective is committed to facilitating the exercise of these rights transparently and efficiently.
- Right to Access: You have the right to request copies of your personal data we hold.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure ('Right to be Forgotten'): You have the right to request that we erase your personal data, under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
To exercise any of these rights, please contact us at [email protected]. We will respond to all legitimate requests within one month. We may need to verify your identity before fulfilling your request.