Legal

Privacy Policy

How Blash Advisory collects, uses and protects personal data, including data obtained through LinkedIn's APIs, and the rights you have under UK GDPR.

Effective date: 20 June 2026. Last updated: 20 June 2026.

Blash Advisory is a trading name of Blash Limited, a company registered in England and Wales (number 12827998), with registered office at 1 Mayfair Place, Level 1 Devonshire House, London W1J 8AJ. Blash Limited is the data controller for the personal data described in this policy. You can contact us at contact@blash.uk.

1. Data we collect

We collect: (a) information you provide when you contact us or book a consultation, such as your name, email address, company and message; (b) professional and business contact information from public and business sources for the purposes of business-to-business outreach; (c) website usage data through cookies and privacy-friendly analytics, as described in our Cookie Policy; and (d) social media engagement data, such as reactions and comments, when you interact with our LinkedIn company page.

2. How we use it, and our legal basis

We use personal data to respond to enquiries and provide our services (performance of a contract and our legitimate interests), to carry out business-to-business marketing to relevant professionals (legitimate interests), and to operate and improve our own LinkedIn company page and respond to comments (legitimate interests). We do not use data obtained through LinkedIn's APIs for advertising, or to build or sell profiles.

3. Social media and LinkedIn data

Engagement data obtained through LinkedIn's APIs is used solely to manage our own LinkedIn presence. It is stored securely, is never sold or shared with third parties for their own purposes, and is deleted on request or when it is no longer needed. We comply with LinkedIn's API Terms of Use and Community Policies.

4. Sharing

We do not sell personal data. We share data only with service providers who help us operate our business, such as email, CRM, hosting and analytics providers, under appropriate data-processing terms, or where we are required to do so by law.

5. Retention and deletion

We keep personal data only for as long as necessary for the purposes set out above, after which we delete or anonymise it. We are able to securely delete personal data obtained through third-party APIs, including LinkedIn, on request.

6. International transfers

Where personal data is transferred outside the United Kingdom or the EEA, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or an adequacy decision.

7. Your rights

Under UK GDPR you have the right to access a copy of your personal data, to have inaccurate data corrected, to have your data deleted, to restrict or object to how we process it, and to request portability of the data you provided to us. Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, or to opt out of marketing, email contact@blash.uk and we will respond within one month. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

8. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the effective date shown above.

9. Contact us

For any question about this policy or about how we handle your personal data, please contact the data controller:

Blash Limited
1 Mayfair Place, Level 1 Devonshire House, London W1J 8AJ
Email: contact@blash.uk
Phone: +44 20 8050 3592

Get expert guidance on a variety of financial matters