How InShare Management Services uses personal information when you visit our website, contact us or work with us.
1. Who is responsible for your information
InShare Management Services Ltd (company number 17099301) is a controller of personal information used for its own advisory, administration, business and legal purposes. Clients, insurers and other organisations involved in an engagement may act as separate controllers and provide their own privacy notices.
Contact for privacy enquiries and rights requests: Graeme Thurgood, Graeme@Insharerisk.com. Postal address: Barrington House, Heyes Lane, Alderley Edge, Cheshire, SK9 7LA. This notice applies to the InShare Management Services website and our related services.
2. Information we use and where it comes from
We use names, business contact details, job roles, correspondence, enquiry details and information needed to deliver our engagements. This can include business, financial, operational and insurance information about the organisations we work with. Information about a business may identify its owners, directors, employees or other individuals.
We obtain information from you, the organisation you represent, its advisers and, where relevant to an engagement, insurers, service providers and public business or regulatory registers. Please only supply information that is relevant and that you are entitled to share. Where you provide information about other people, please make this notice available to them.
We do not request health information or criminal-conviction data through this website. Please do not include this information in website enquiries.
3. Why we use information and our lawful bases
Enquiries and business relationships: to respond to enquiries and manage business contacts. We rely on our legitimate interests in providing and managing our services, balanced against individuals’ rights.
Engagements: to scope, deliver and administer advisory and project work. We rely on contract where the individual is a party to the contract or has requested pre-contract steps; otherwise we rely on legitimate interests in delivering the engagement.
Legal and regulatory duties: to meet applicable record-keeping and legal requirements. We rely on legal obligation.
Complaints, security and legal claims: to investigate concerns, protect our systems, prevent misuse and establish, exercise or defend legal claims. We rely on legitimate interests and, where applicable, legal obligation.
Business updates: where we send relevant business communications, we rely on legitimate interests where permitted and obtain consent where required. You can object to direct marketing at any time using the message’s opt-out route or by contacting us. Where we rely on consent, you can withdraw it without affecting earlier lawful processing.
4. Who receives information
We share relevant information, where necessary, with InShare Group companies providing services or operational support; clients and their advisers involved in an engagement; and suppliers supporting our website, email and IT. Where a matter requires regulated distribution or underwriting services, we will share relevant information with the appropriate InShare Group business with your agreement. We may also disclose information to professional advisers, auditors, regulators, courts or other authorities where required or justified by the relevant purpose. We limit sharing to what is needed and apply appropriate confidentiality and data-protection arrangements.
5. Website enquiries and analytics
Our website is hosted by Framer. The contact form collects your name, organisation, email address, the nature of your enquiry and a brief description. Submissions are processed through Framer and delivered to our team so we can respond and route the enquiry. Enquiries and subsequent correspondence are handled in our business email and relevant records.
We use Framer’s built-in analytics to understand aggregate website use. These analytics do not use cookies or persistent visitor identifiers. Technical information may also be processed to deliver and secure the website. See our Cookie policy for more information.
6. International processing
Our service providers may process information outside the UK. Where a restricted international transfer is involved, the required UK data-protection safeguards must apply, such as UK adequacy regulations or approved contractual safeguards with any necessary additional measures. You can contact us for information about the safeguards relevant to your data. Framer’s data-processing terms describe its hosting and international-transfer arrangements.
7. How long we keep information
We retain personal information for as long as needed for the purpose for which it was collected and to meet applicable legal and contractual requirements. For enquiries, we consider whether the enquiry remains active and whether a record of our response is needed. For engagements, we consider the engagement period, contractual requirements, possible complaints and the time needed to establish or defend legal rights. We review information and delete or anonymise it when it is no longer required. Contact us for the retention criteria applicable to a particular record.
8. Your rights and concerns
Depending on the circumstances, you may request access to your personal information, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You have an absolute right to object to direct marketing. These rights are subject to applicable conditions and exceptions. We may need to verify your identity and will respond within the applicable statutory period.
Contact Graeme@Insharerisk.com to exercise your rights or raise a concern. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. We would welcome the opportunity to address your concern first, but you do not have to contact us before the ICO.
9. Updates
We may update this notice when our services or processing change. The date on this page identifies the latest revision.
Last updated: 14 November 2026