Privacy Notice

Deva Victrix Enterprises Ltd, trading as Deva Victrix

Effective — August 2026

1Who We Are

Deva Victrix Enterprises Ltd, trading as Deva Victrix, is responsible for personal data processed for its own purposes through this website and in connection with enquiries, business development and its professional activities.

Registered office: 30 St. Giles, Oxford, England, OX1 3LE. Email: info@devavictrix.com.

2Scope

This Privacy Notice explains how we handle personal data relating to website visitors, people who contact us, prospective and current business contacts, representatives of clients and prospective clients, suppliers, advisers, counterparties, event and network contacts and other professional contacts.

Where a separate client engagement requires different or additional data-processing terms, those terms may also apply.

3Personal Data We May Collect

4How We Obtain Personal Data

We may obtain personal data directly from you; from your organisation or colleagues; from clients, prospective clients, advisers, counterparties and professional contacts; from publicly available professional or corporate sources; and through the operation of our website and approved service providers.

5Purposes and Lawful Bases

PurposeTypical dataLikely lawful basis
Responding to enquiries and discussing potential engagements Identity, contact and enquiry information Legitimate interests; steps at the request of a prospective contracting party where applicable
Providing and administering professional services Identity, contact, professional and engagement information Performance of contract; legitimate interests; legal obligation where applicable
Business development and professional relationship management Professional contact, relationship and communication information Legitimate interests; consent where required for a particular form of direct marketing
Operating, securing and improving the website Technical, security and usage information Legitimate interests; consent where required for non-essential storage/access technologies
Legal, regulatory, compliance and risk management Relevant identity, communication and engagement information Legal obligation; legitimate interests
Establishing, exercising or defending legal claims Relevant records and communications Legitimate interests; legal claims condition where special-category data is involved and applicable
Recruitment [CONFIRM] Application and recruitment information Steps before contract; legitimate interests; legal obligations

Where we rely on legitimate interests, those interests may include operating and protecting our business, responding to professional enquiries, managing relationships, maintaining records, improving our services and protecting legal rights. We will not rely on legitimate interests where our interests are overridden by applicable data-protection rights.

6Special-Category and Sensitive Information

Please do not send special-category, criminal-offence or other highly sensitive personal data through a general website form unless it is necessary and you have been asked to provide it. If such information is processed, we will identify an appropriate lawful basis and additional condition where required.

7Who We Share Personal Data With

We may share personal data where reasonably necessary with our personnel, professional advisers, contractors and service providers; IT, hosting, security, communications, CRM, document-management and analytics providers; counterparties or professional participants where appropriate to an engagement or opportunity and lawfully permitted; regulators, courts, law-enforcement bodies or other authorities where required; and prospective purchasers or advisers in connection with a bona fide corporate transaction.

[CONFIRM AND INSERT material website/service providers before publication — for example hosting/CDN, forms/CRM, email platform, analytics, scheduling, video embeds and recruitment systems. As built, this site uses no analytics, CRM, email-marketing platform or embedded third-party media — the only external request made by the site is to Google Fonts, to load its typeface.]

8International Transfers

Some service providers may process personal data outside the United Kingdom. Where a restricted transfer occurs, we will use an applicable lawful transfer mechanism and appropriate safeguards.

[CONFIRM actual providers, processing locations and transfer mechanisms before publication.]

9Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, regulatory, insurance and dispute-resolution requirements.

Enquiry and business-development records are periodically reviewed and deleted or anonymised when no longer reasonably required. Client and engagement records may be retained for longer periods where appropriate to contractual, legal, regulatory, insurance or claims requirements.

[CONFIRM internal retention schedule before publication.]

10Security

We use organisational and technical measures appropriate to the nature of the information and risks involved. No internet transmission or storage system can be guaranteed to be completely secure.

11Your Rights

Subject to applicable law and relevant exemptions, individuals may have rights to request access to personal data, correction, erasure, restriction, portability, objection to certain processing, and withdrawal of consent where processing is based on consent.

You may contact info@devavictrix.com to exercise a right. You also have the right to complain to the UK Information Commissioner's Office.

12Direct Marketing

You may opt out of marketing communications at any time using the unsubscribe mechanism provided or by contacting us. We will respect applicable rules governing electronic direct marketing.

13Cookies and Similar Technologies

Our use of cookies and similar storage/access technologies is described in our Cookie Notice. Non-essential technologies should not be activated before the required consent has been obtained.

14Third-Party Websites

Our website may link to third-party sites. Their handling of personal data is governed by their own privacy information, not this Privacy Notice.

15Changes

We may update this Privacy Notice from time to time. The current version will be published on the website with its effective date.

16Contact

Deva Victrix Enterprises Ltd, 30 St. Giles, Oxford, England, OX1 3LE.
Email: info@devavictrix.com.