Last revised: 10 September 2026
Steadway Capital Limited is a company registered in England and Wales under company number 17254824, with its registered office at 167-169 Great Portland Street, London W1W 5PF. It is the data controller for the personal data described in this notice and is registered with the Information Commissioner’s Office under registration number ZC163252. References to “we”, “us” and “our” mean Steadway Capital Limited.
If you have any question about this notice or about how we handle your data, or if you want us to stop contacting you, write to privacy@steadwaycapital.com. General enquiries go to info@steadwaycapital.com.
This notice is governed by the laws of England and Wales.
We hold personal data that reaches us in two different ways, and different rules apply to each:
We do not use cookies, tracking scripts or any third-party analytics tools on this website. No personal data is collected passively from visitors to this site.
What we collect: the personal data you choose to give us through the contact form: your name, your company name, your email address, your phone number and anything you include in your message.
How we use it: solely to respond to your enquiry and to assess whether there may be a relevant acquisition opportunity to discuss.
Legal basis: legitimate interests, namely responding to business enquiries and assessing potential acquisition opportunities. We have assessed that this does not override your rights and interests.
How long we keep it: up to 12 months from the date of your enquiry, unless we need to keep it longer in connection with an ongoing business relationship or a legal obligation. You may ask us to delete it at any time.
Who processes it: contact form submissions are handled by Formspree, a third-party form service acting as a data processor on our behalf. Formspree may process data outside the United Kingdom; where it does, appropriate safeguards are in place in accordance with applicable data protection law.
Purpose: to identify businesses we may wish to acquire and to contact their owners or directors about that. We contact you in your capacity as a director or owner of the business, about the business.
Where it comes from: publicly accessible sources, including Companies House, public registers and directories and the business’s own website.
What we hold: the business’s name, address and contact details; its Companies House record, including the names of directors and persons with significant control and the details Companies House publishes about them; our own working notes; and a record of any contact with you, any reply and any request not to be contacted. We hold no special category data and no home addresses.
Legal basis: legitimate interests under Article 6(1)(f) of the UK GDPR, namely identifying and approaching businesses we may wish to acquire. We have carried out and recorded a legitimate interests assessment. No decision with a legal or similarly significant effect is made about you by automated means.
How long we keep it: up to 24 months from the date we first record the business, after which the record is reviewed and deleted unless a discussion is under way or you have asked us to keep it. If you ask us not to contact you, we keep only the business name and the date of your request so that we do not contact you again.
Who we share it with: no one, other than professional advisers bound by confidentiality where a discussion with a business is under way.
If you do not want to hear from us about a possible sale of your business, tell us and we will stop. Your right to object to direct marketing is absolute: you do not need to give a reason and we do not weigh it against our own interests. Email privacy@steadwaycapital.com or write to our registered office. We will mark the record so that we do not contact you again and confirm to you in writing. One email is enough.
To exercise any of these rights, contact us at privacy@steadwaycapital.com. We will respond within one month. We may ask you to confirm your identity before acting on a request.
Contact form submissions are processed by Formspree as described in section 3. All other personal data is held in our Microsoft 365 environment on servers in the United Kingdom or the European Economic Area. We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse, and we do not share it with any third party other than those named in this notice.
If you believe we have handled your personal data incorrectly, you may complain to us at privacy@steadwaycapital.com and we will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.
We may update this notice from time to time. The date at the top of this page shows when it was last revised.