Draft for review — not approved for publication
Privacy notice
A meaningful working draft of the information that will need confirmation before personal information is collected through a live Merlin Grace website.
Legal wording awaiting confirmation
The company identity is confirmed. Regulatory disclosures, working contact details and the final legal wording remain unresolved.
Merlin Grace Capital Limited · Company number 17199499
Company informationPurpose of this draft
This page is a working structure for the future privacy notice. Merlin Grace Capital Limited is the intended website operator; data-controller responsibilities, contact details and processing activities still require confirmation.
Information collected through the enquiry form
The enquiry form is displayed but currently disabled, so it does not collect or submit information. If enabled after approval, the planned fields are name, company, work email, optional phone number, enquiry type, message and, for suppliers, optional business details. The website does not keep a database of enquiries or store form contents in the browser.
How enquiries are processed
Online enquiries are currently unavailable, so the form cannot submit information or send email. Before a future launch, the intended process is for an enquiry to be sent as an internal email notification to the Merlin Grace team, with no automatic acknowledgement or marketing email. The email provider, retention, lawful basis and final notice remain to be confirmed.
How information may be used
Potential purposes include responding to enquiries, discussing supplier or funding-provider relationships, assessing business-finance opportunities and meeting legal or compliance obligations. The lawful bases for each purpose remain to be confirmed.
Sharing and international transfers
The final notice must identify relevant service providers, professional advisers and funding recipients, the circumstances in which information is shared, and whether any international transfer safeguards are required.
Retention, rights and contact
Retention periods, the process for exercising data rights, the confirmed data-controller role and the correct privacy contact must be supplied and approved before publication.