SIS Privacy Policy.
Specialist Investigative Support (“SIS”) respects the privacy of those who contact us, instruct us or otherwise provide personal information to us. We recognise that the nature of our work can involve sensitive information and that appropriate handling, security, confidentiality and accountability are fundamental to the services we provide.
This Privacy Policy explains how SIS processes personal data in connection with our website, enquiries, client relationships and the delivery of investigative, intelligence and related professional services.
SIS is registered with the Information Commissioner’s Office (ICO) and processes personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we process information about.
In the course of our work, SIS may process personal data relating to clients, prospective clients, professional advisers, employees, contractors, witnesses, subjects of enquiries or investigations, and other individuals relevant to an instruction.
The nature of the information processed will depend upon the circumstances and purpose of the instruction. It may include identification and contact information, communications, professional or employment information, imagery, video or audio material, information obtained through lawful investigative or intelligence activity, and other information relevant to establishing facts, assessing risk or supporting client decision-making.
Where the nature of an instruction requires it, information processed may include special category personal data or information relating to criminal allegations, proceedings or offences. Such information is processed only where there is an appropriate lawful basis and the additional requirements applicable to that category are met.
Why we process personal data.
SIS processes personal data only where it is necessary and proportionate for a legitimate and lawful purpose.
Depending on the circumstances, we may process personal data in order to respond to enquiries, assess or accept instructions, provide investigative, intelligence or related professional services, establish or verify facts, assess and manage risk, develop or preserve evidence, protect the legitimate interests of our clients or others, comply with legal or regulatory obligations, or establish, exercise or defend legal claims.
The lawful basis relied upon will depend on the circumstances and may include performance of a contract, compliance with a legal obligation, legitimate interests, consent where appropriate, or another lawful basis available under UK data protection law.
Where SIS processes special category data or criminal offence data, we identify and document the additional condition required by applicable data protection legislation and apply any additional safeguards required by law.
Information obtained during the course of investigations and intelligence activity.
SIS may obtain personal data directly from clients, individuals concerned, professional advisers and other parties, or through lawful investigative and intelligence activity.
Information may also be obtained from publicly available sources, records and databases, observations, enquiries, communications, imagery or other material relevant to the purpose of an instruction.
The nature of investigative work means that it will not always be appropriate or possible to inform an individual that their personal data is being processed at the time it is obtained. Where this applies, SIS will process that information only where there is a lawful basis for doing so and in accordance with applicable data protection requirements.
How we use and share information.
SIS treats information obtained through its work as confidential and restricts access to those who require it for the purpose of the instruction.
Personal data may be shared with the client who instructed SIS and, where necessary and appropriate, with their legal or professional advisers, relevant authorities, courts, tribunals or other parties where disclosure is required or justified by the purpose of the instruction or by law.
SIS does not sell personal data or use information obtained through investigative or intelligence activity for marketing purposes.
Where third-party professional or technical services are required, SIS takes reasonable steps to ensure that personal data is handled appropriately and subject to suitable confidentiality and data protection arrangements.
Retention and transfer of investigative material.
SIS retains personal data only for as long as necessary for the purpose for which it is being processed and in accordance with applicable legal, regulatory and professional requirements.
At the conclusion of an instruction, SIS provides the client with the investigative or intelligence material forming the case file, including original evidential material where applicable. This is intended to preserve the integrity, provenance and continuity of material that may subsequently be required for legal, regulatory, disciplinary or other proceedings.
SIS does not routinely retain a duplicate investigative case file after the material has been transferred to the client. Responsibility for the subsequent retention, management and disposal of that material rests with the client, subject to their own legal, regulatory and disclosure obligations. Where SIS is required by law, regulation, legal proceedings or another overriding legal position to preserve particular material, it may retain that material for so long as the requirement applies.
SIS may retain limited administrative, contractual and financial records where necessary for accounting, taxation, insurance, legal or regulatory purposes.
International transfers.
SIS does not routinely transfer personal data obtained through investigative or intelligence activity outside the United Kingdom.
Where an instruction requires personal data to be transferred internationally, any transfer will be considered in advance and undertaken only where there is an appropriate lawful basis and the requirements of UK data protection law concerning international transfers are satisfied.
Information security.
SIS applies appropriate organisational and technical measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.
The nature and sensitivity of the information processed is considered when determining appropriate handling, access, storage and transmission arrangements.
Access to operational information is restricted to personnel who require it for the legitimate purpose of the instruction.
Your data protection rights.
Depending upon the circumstances, individuals may have rights under UK data protection law including the right to request access to personal data, rectification of inaccurate information, erasure, restriction of processing, data portability and objection to processing.
These rights are not absolute. In particular, exemptions or restrictions may apply where personal data is processed for purposes including legal proceedings, regulatory functions, the prevention or detection of crime, protection of the rights of others, or other circumstances recognised by law.
Requests concerning personal data processed by SIS should be made using the contact details provided on this website.
Website, cookies and analytics.
The SIS website may process limited technical information relating to visitors, including information necessary for the operation, security and performance of the website.
Cookies and similar technologies may also be used. Where consent is required, visitors are provided with appropriate choices through the website’s cookie consent controls.
Further information about the cookies used by the website and available choices can be accessed through the cookie settings provided on the site.
Third-party services and websites.
The SIS website may contain links to external websites or use services supplied by third parties. SIS is not responsible for the privacy practices of independent third-party websites, and visitors should review the relevant privacy information provided by those organisations.
Where SIS engages a third-party service provider to process personal data on its behalf, appropriate consideration is given to confidentiality, security and data protection requirements.
Changes to this Privacy Policy.
SIS may update this Privacy Policy where necessary to reflect changes in its services, legal or regulatory requirements, or the way personal data is processed.
The current version will be published on this website.
Contact and complaints.
Questions about this Privacy Policy, the way SIS processes personal data, or requests concerning personal data can be made through the contact details provided on this website.
Individuals also have the right to raise concerns with the Information Commissioner’s Office where they believe their personal data has been processed in breach of applicable data protection law.
Last reviewed: August 2026