Red Rose Investigations logo Red Rose Investigations Private Investigator

Privacy notice

This notice explains how Red Rose Investigations handles personal data, in line with UK GDPR and the Data Protection Act 2018.

Last updated: 12 November 2026.

Who is responsible for your data

The data controller is Frank, trading as Red Rose Investigations.

For information about your data protection rights, see the Information Commissioner’s Office website at ico.org.uk.

The information I collect

I only collect what is needed for the purpose at hand:

  • Enquiries: your name, contact details, the town or area the job relates to, the type of service, and the information you include in your message. If you use the website form, this is also processed by the hosting provider, Netlify, in order to deliver the message to me.
  • Instructed work: the further details needed to carry out the instruction, which may include information about other people where that is necessary and lawful for the purpose you have given me.
  • Business records: quotes, contracts, reports, invoices and related correspondence.

This website does not set analytics or advertising cookies. The contact form may use a technical cookie or similar function that the host needs in order to receive submissions securely.

Why I use it (lawful bases)

  • Contract, and steps you ask me to take before a contract, when you request a quote or instruct me.
  • Legitimate interests, where I need to operate the service, keep records, defend legal claims, or — for investigation work — process information about other people, but only where you have a legitimate purpose and the work is lawful and proportionate.
  • Legal obligation, for example keeping records required for tax, or responding to a binding request from a court or regulator.
  • Consent, where I rely on it (for example, certain optional communications). You can withdraw consent at any time.

I only accept investigation instructions that have a clear, legitimate purpose. I will not process personal data in order to harass someone, or in a way that would put a vulnerable person at risk.

Who I share it with

I do not sell personal data. I share it only where it is necessary:

  • With you, as my client, in reports and updates
  • With solicitors, courts, creditors or other parties, where that is part of the agreed instruction or is otherwise required
  • With service providers who process data for me, such as the website host (Netlify) for contact-form submissions, and email or IT providers, under appropriate terms
  • With professional advisers, insurers or a regulator, where I have a legitimate need or a legal duty to do so

International transfers

The website and contact form are hosted by Netlify. Some processing may take place outside the United Kingdom. Where that happens, I will rely on a lawful transfer mechanism, such as the UK’s adequacy regulations or the UK International Data Transfer Agreement / Addendum, as applicable.

How long I keep it

Enquiry information that does not become an instruction is kept only for as long as it is needed to respond and to keep a short business record. Case files, reports and financial records are kept for six years after the case closes, or longer if the law requires it or a claim is outstanding. After that, they are securely deleted or destroyed.

Your rights

You have the right, in the circumstances set out in UK GDPR, to:

  • access your personal data
  • have inaccurate data corrected
  • ask for data to be erased
  • restrict or object to certain processing
  • receive data you have provided in a portable format
  • withdraw consent, where I am relying on consent

Some of these rights are limited, for example where I must keep information to comply with the law or to defend a legal claim, or where erasure would prevent me from completing an agreed instruction.

To exercise a right, contact me using the details above. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113.

Changes to this notice

I may update this notice from time to time. The revised version will be published on this page with an updated date.