Privacy Policy

This policy explains how Leela Regulatory Solutions Limited, trading as Leela Partners ("Leela", "we", "us"), uses personal information collected through this website, enquiries, event registrations, newsletters and other marketing activities. It should be read alongside our Cookie Policy.

Leela Regulatory Solutions Limited is the controller of the personal information described in this policy. It is registered in England and Wales under company number 10161396, with its registered office at 82 St John Street, London, EC1M 4JN. For privacy enquiries, email info@leelapartners.com.

Information we collect

We may collect the name, organisation, job title, email address, telephone number and message you provide when you contact us or register for updates or events. We also receive technical information when you use the website, such as device and browser information, IP address and information generated by cookies or similar technologies. Our Cookie Policy explains those technologies in more detail.

Why we use it

Purpose	Lawful basis
Responding to an enquiry and discussing a potential service	Legitimate interests in responding to business enquiries, or steps requested before entering a contract, as appropriate to the enquiry
Operating, securing and improving the website	Legitimate interests in maintaining a secure and effective website, subject to the separate rules for cookies and similar technologies
Sending requested newsletters or event updates	Consent where you have actively asked to receive marketing communications; or legitimate interests where we send relevant business-to-business marketing to a corporate contact and reasonably believe it will be of professional interest. Electronic marketing rules also apply, and you can opt out at any time.
Assessing a potential client and meeting legal or regulatory obligations	Compliance with legal and regulatory obligations, including applicable client due diligence, anti-money laundering, sanctions screening and other regulatory requirements. Where a specific legal obligation does not apply, legitimate interests in assessing whether to establish a business relationship.

Where we rely on legitimate interests, the relevant interest is identified above. We consider the effect of that use on individuals' rights and interests.

Where information comes from and who receives it

Most information covered by this policy comes directly from you. We may also obtain professional contact information from public sources, including Companies House and the Financial Services Register maintained by the Financial Conduct Authority.

We may share information with staff and service providers who support the website, hosting, email, customer relationship management, event administration, analytics or IT security. We may also share it with professional advisers or authorities where necessary and lawful.

We do not describe information as anonymous where it can still identify you.

International transfers

We do not transfer the personal information covered by this policy outside the UK.

How long we keep information

We keep personal information only for as long as needed for the purpose for which it was collected, including any applicable legal or regulatory requirements.

Record category	Retention period
Enquiries that do not become clients	Four years from the date of the last substantive contact, unless the information is required for a complaint, legal claim, regulatory enquiry or fraud-prevention purpose.
Marketing contacts	Until you opt out or after two years without meaningful engagement, whichever occurs first. A minimal suppression record may be retained for as long as necessary to ensure that an opt-out continues to be respected.
Event registrations	Twelve months after the event, unless the attendee separately agrees to receive ongoing marketing communications.
Website security and access logs	Twelve months from collection, unless a longer period is reasonably necessary to investigate a security incident, suspected fraud or unlawful activity.
Cookies and analytics records	Session cookies expire when the browser session ends. Persistent cookies and associated analytics information are retained for the period stated in Leela's cookie schedule and, as a default, for no longer than 13 months unless a shorter period is configured.

Your rights

Depending on the circumstances, you may have rights to access your personal information, correct it, request its deletion, restrict or object to its use, or receive and transfer it. If we rely on consent, you may withdraw it at any time without affecting use of your information before withdrawal.

You have the right to object at any time to the use of your personal information for direct marketing. To exercise a right or unsubscribe from marketing, contact info@leelapartners.com or use the unsubscribe link in a marketing email. Some rights are subject to legal conditions and exemptions.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Complaints

Please contact us first if you have a concern about how we use your information. You may also complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

We may update this policy as our activities or legal requirements change. The current version will be published on this page.

Last updated: September 2026