Last updated: February 2026
- Who we are
This website is operated by Banyan Tree (London) Limited, company number 9922960 , registered in England and Wales with its registered office at 4th floor, 4 Tabernacle St, London EC2A 4LU.
For the purposes of UK data protection law, we are the data controller of the personal data described in this notice.
If you have any questions about this notice or how we use your personal data, you can contact us at:
Email: gemma@gemmabullivant.co.uk
Postal address: 4th floor, 4 Tabernacle St, London EC2A 4LU
- What personal data we collect
We may collect and process the following categories of personal data through this website:
Information you provide directly
- Name
- Email address
- Telephone number
- Organisation name
- Any information you include in a contact form or email enquiry
- Marketing preferences
Information collected automatically
- IP address
- Browser type and version
- Device type
- Operating system
- Pages visited and time spent on the site
- Referral source
We do not intentionally collect special category data through this website. Please do not submit sensitive personal data via website forms.
- How we use your personal data and our lawful basis
We use your data for the following purposes:
Responding to enquiries
If you contact us via the website, we use your information to respond to your enquiry.
Lawful basis: Legitimate interests, namely responding to prospective client enquiries. Where appropriate, steps prior to entering into a contract.
Sending marketing communications
If you subscribe to our mailing list, we use your email address to send updates, insights, events and information about our services.
Lawful basis: Consent. You can withdraw consent at any time by clicking “unsubscribe” or contacting us.
Website analytics and improvement
We use analytics tools to understand how visitors use our website and to improve content and performance.
Lawful basis: Consent for non-essential cookies. Legitimate interests for strictly necessary website functionality and security.
Website security and administration
We use technical data such as IP addresses to protect the website from misuse and maintain its security.
Lawful basis: Legitimate interests in protecting our website and business.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
- Cookies and analytics
This website uses cookies. Some cookies are strictly necessary for the website to function. Others, such as analytics cookies, are optional and used only with your consent.
We use Google Analytics (GA4) to understand how visitors use the site. This includes information such as pages viewed, approximate geographic location and device type. IP anonymisation is enabled and we do not receive information that directly identifies you.
You can manage your cookie preferences through our cookie consent tool. You can also change your browser settings to control cookies.
Further information is available in our Cookie Policy.
- How long we retain your data
We retain personal data only for as long as necessary for the purpose for which it was collected.
Typical retention periods are:
- Contact form enquiries: up to 12 months unless a business relationship is established.
- Marketing subscribers: until you unsubscribe or withdraw consent.
- Analytics data: in line with Google Analytics retention settings.
- Suppression list records: retained as necessary to ensure we respect your marketing opt-out.
Where we are legally required to retain information, we will do so in accordance with those obligations.
- How we share your data
We do not sell your personal data.
We may share your data with trusted third-party service providers who support the operation of our website and business, such as:
- Website hosting providers
- Email marketing platforms
- Analytics providers
- IT support providers
These providers act as data processors and are contractually required to process data only on our instructions and to keep it secure.
We may also disclose personal data where required by law or to protect our legal rights.
- International transfers
Some of our service providers may process personal data outside the UK.
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:
- UK adequacy regulations
- The UK International Data Transfer Agreement
- Other legally approved transfer mechanisms
You can request further information about these safeguards by contacting us.
- Your rights
Under UK data protection law, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request erasure of your data in certain circumstances
- Request restriction of processing
- Object to processing based on legitimate interests
- Request data portability where applicable
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, please contact us using the details above.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.
Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
We would very much welcome the opportunity to address your concerns before you approach the ICO.
- Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. This includes secure hosting environments, access controls and the use of reputable third-party providers.
While no system can guarantee absolute security, we take data protection seriously and review our measures regularly.
- Data breaches
Where we are legally required to do so, we will notify the ICO of a personal data breach within 72 hours. If a breach is likely to result in a high risk to your rights and freedoms, we will inform you directly.
- Changes to this notice
We may update this Privacy Notice from time to time. The latest version will always be available on this website and will show the date of the most recent update.