Clifford Street Advisors LLP – Privacy Policy

Dated: 17 April 2018

Please read this policy carefully before using CSTA’s website

Protecting your data, privacy and personal information is very important to Clifford Street Advisors LLP (“CSTA”, “our”, “us” or “we”).

This policy, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by CSTA. Please read this privacy policy carefully to understand the types of information we collect from you, how we use that information, the circumstances under which we will share it with third parties, and your rights in relation to the personal data you provide to us.

This privacy policy applies only to your use of our website at (our “Website”) or any contact you make with us by email, not to your use of any of the services we offer.

Information we may collect

We may collect and process the following data about you:

  • Information that you provide to us. You will be asked to provide us with your information when you correspond with us by phone, email or otherwise.

The information you will be asked to provide us for these purposes will include your name, address, email address, phone number, job title and place of work.

  • Information that we collect about you. With regard to each of your visits to our Website we may automatically collect the following information:
    • technical information about your computer, including where available, your IP address, operating system and browser type, for system administration and analytical purposes; and
    • details of your visits to your website, including full Uniform Resource Locators (URL) and clickstream to and from our website (including date and time).]

Information that we may collect about others. We may collect and process personal data about others that you provide us with, including (but not limited to) information that you provide to us by filling in forms on our Website, or by email. This information might include, but is not limited to names, addresses, email addresses, phone numbers, job titles and places of work. You must have obtained clear permission from any individuals whose data you provide us with before sharing that data with us.

For the avoidance of doubt, any reference in this privacy policy to your data shall include data that you have provided to us about other individuals.

How we use your information and justification of use

Use of personal information under EU data protection laws must be justified under one of a number of legal “grounds” and we are required to set out the ground in respect of each use of your personal data in this policy. The principal grounds that justify our use of your information include:

  • Consent: where you have consented to our use of your information (you are providing explicit, informed, freely given consent, in relation to any such use and may withdraw your consent in the circumstance detailed below by notifying us);
  • Contract performance: where your information is necessary to enter into or perform our contract with you;
  • Legal obligation: where we need to use your information to comply with our legal obligations;
  • Vital interests: where we need to use your information to protect your vital interests;
  • Legitimate interests: where we use your information to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights; and
  • Legal claims: where your information if necessary for us to defend, prosecute or make a claim against you or a third party.

We use information held about you (and information about others that you have provided us with) in the following ways:

Types of Information Collected Uses of that Information Use Justification
Name, email address, telephone number For processing any enquiries made via our Website. Legitimate interests (to provide you with information or a service you have requested)
Name, address, email address, phone number, place of work, job title, professional and educational history To connect you to any of our portfolio companies. Legitimate interests (to provide you with information or a service you have requested)

We will not sell your personal data (or any other data you provide us with) to third-parties.

Disclosure of your information

We may also disclose your personal information to third parties in the following circumstances:

Purpose of disclosure and third party(s) to which disclosure might be made Use Justification
We may disclose your name, address, email address, phone number, place of work, job title, professional and educational history to our portfolio companies. Legitimate interests (to provide you with information or a service you have requested)

Security over the internet

No data transmission over the internet or website can be guaranteed to be secure from intrusion. However, we maintain commercially reasonable physical, electronic and procedural safeguards to protect your personal information in accordance with data protection legislative requirements.

How long we retain your data

We will hold the above information for as long as necessary in order to deal with any specific issues that may raise, or otherwise as is required by law or any relevant regulatory body. We shall delete the personal data you share with us within 5 years. Some personal data may need to be retained for longer than this to ensure we can comply with applicable laws and internal compliance procedures.

If information is used for two purposes, we will retain it until the purpose with the latest period expires but we will stop using it for the purpose with a shorter period when that period expires.

We restrict access to your personal information to those persons who need to use it for the relevant purpose(s). Our retention periods are based on business needs and your information that is no longer needed is either irreversibly anonymized (and the anonymized information may be retained) or securely destroyed.

Your rights

Under the General Data Protection Regulation (EU) 2017/676, you have various rights in relation to your personal data. All of these rights can be exercised by contacting us at
You have the following rights in relation to your personal data:

Rights Details
Right to Rectification We will use reasonable endeavours to ensure that your personal information is accurate. In order to assist us with this, you should notify us of any changes to the personal information that you have provided to us by sending us a request to rectify your personal data where you believe the personal data we have is inaccurate or incomplete.
Right to erasure / ‘Right to be forgotten’ Asking us to delete all of your personal data will result in us deleting your personal data without undue delay (unless there is a legitimate and legal reason why we are unable to delete certain of your personal data, in which case we will inform you of this in writing).
Right to restriction of processing You have the right to ask us to stop processing your personal data at any time.
Right to data portability You have the right to request that we provide you with a copy of all of your personal data and to transmit your personal data to another data controller in a structured, commonly used and machine-readable format, where it is technically feasible for us to do so. We provide tools and custom reports for you to easily collate and download information which you submit whilst using our Website.
Right to complain You have the right to lodge a complaint to a supervisory authority such as the Information Commissioner’s Office in the UK (see Although we encourage our customers to engage with us in the event they have any concerns or complaints.

CSTA will not ordinarily charge you in respect of any requests we receive to exercise any of your rights detailed above; however, if you make excessive, repetitive or manifestly unfounded requests, we may charge you an administration fee in order to process such requests or refuse to act on such requests. Where we are required to provide a copy of the personal data undergoing processing this will be free of charge; however, any further copies requested may be subject to reasonable fees based on administrative costs.

Where you request CSTA to rectify or erase your personal data or restrict any processing of such personal data, we may notify third parties to whom such personal data has been disclosed of such request. However, such third party may have the right to retain and continue to process such personal data in its own right, for example to comply with their legal obligations.

Changes to this policy

Any changes we make to our privacy policy in the future will be posted on this page, and where appropriate, notified to you by email. We therefore encourage you to review it from time to time to stay informed of how we are processing your information.


Questions, comments and requests regarding this privacy policy are welcome and should be addressed to Nolan Grills.

For the purpose of the relevant data protection legislation, the data controller is Clifford Street Advisors LLP with registered address at Third Floor, 7/8 Savile Row, London, W1S 3PE.