Last updated: 17 September 2026
SM CONCIERGE LTD (company number 16952815), registered in England and Wales, is the controller of the personal data described in this notice. In this policy, “we” and “us” mean SM CONCIERGE LTD.
This notice explains what we collect when you use this website or send us an enquiry, why we process it, who we share it with, how long we keep it, and the rights you have.
We do not ask for payment card details, identity documents or financial information through this website. Please do not send them to us by email.
| Purpose | Data used | Lawful basis (UK GDPR) |
|---|---|---|
| Reviewing your enquiry and replying to you | Name, email, phone, and the service, region and message you submit | Article 6(1)(b) — steps taken at your request before entering into a contract |
| Keeping a record of the enquiry in our CRM so the request is not lost between the people handling it | Name, email, phone, enquiry detail | Article 6(1)(f) — our legitimate interest in running an orderly private office and keeping business records |
| Protecting the enquiry forms from automated abuse (rate limiting and bot detection) | IP address and request headers | Article 6(1)(f) — our legitimate interest in keeping the site and our inbox usable and secure |
| Measuring how the website is used, and measuring advertising performance | Usage and device data collected by cookies and similar technologies | Article 6(1)(a) — your consent, which you can withdraw at any time |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you can object at any time using the contact details below.
We do not sell your personal data. We share it with the service providers below, who process it on our instructions:
Where regulated work is involved, we introduce you to licensed specialists — for example an aviation operator, law firm or tax adviser. We only pass your details to them with your agreement, and once we do, they act as a separate controller under their own privacy notice.
We may also disclose personal data where we are required to do so by law, or to establish, exercise or defend legal claims.
Some of the providers listed above operate outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK, that transfer is made under an appropriate safeguard recognised by UK data protection law — in practice the International Data Transfer Agreement, or the UK Addendum to the European Commission’s Standard Contractual Clauses. You can ask us for details of the safeguard that applies to a particular transfer.
Analytics and advertising cookies are disabled by default. Nothing is set until you accept them, and you can change or withdraw your choice at any time through the cookie settings on this site. Where analytics is enabled, IP addresses are anonymised before they are stored by Google Analytics.
Our Cookie Policy explains each category in more detail.
Enquiries are transmitted over an encrypted connection and stored in a hosted database with access limited to the people who need it to handle your request. The forms are protected by rate limiting and bot detection. No system is completely secure, and we will tell you and the Information Commissioner’s Office about a personal data breach where the law requires it.
Under UK data protection law you have the right to:
To exercise any of these rights, contact us using the details below. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to address your concerns first.
We may update this policy. Any change is published on this page with a revised “Last updated” date. Where a change materially affects how we use data you have already given us, we will take reasonable steps to tell you.