Privacy Notice

Risk Review Group Limited (“we”, “us”) is a healthcare risk management consultancy registered in England & Wales (company number 17246009) with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.

We are the data controller for the personal information described in this notice. You can contact us about privacy at any time via enquiries@theriskreviewgroup.co.uk or on 07411 475400.

Enquiry details — when you submit the consultation enquiry form or contact us directly, we collect your name, organisation, email address, telephone number (optional), the service you are interested in (optional) and your message.

Correspondence — records of emails and telephone conversations relating to your enquiry or engagement.

Technical data — anonymised analytics about how the website is used, such as pages visited, approximate region and device type, collected through cookies.

To respond to your enquiry and discuss potential work — our legitimate interest in running a consultancy.

To provide consultancy services and manage the client relationship — performance of a contract.

To keep records required by law or professional standards — legal obligation.

To understand and improve how the website is used — our legitimate interest; analytics data is not used to identify you.

We do not use your information for marketing lists, and we do not send promotional email.

Enquiry records are held in access-controlled, encrypted systems and in our company email. Access is limited to the senior consultants handling your enquiry.

We use reputable hosting and email processors operating under contract, and we require them to protect your information to the standard this notice describes.

Enquiry records are kept for up to 24 months after our last contact with you. If you become a client, records are kept for the duration of the engagement and for six years afterwards, to meet legal and professional obligations.

When records are no longer needed, they are securely deleted.

We never sell personal information. We share it only with the service providers who operate our website, database and email systems — acting as processors under contract — and with regulators or authorities where the law requires it.

We use analytics cookies to understand how the site is used, including pages visited and general usage patterns. We do not use advertising or cross-site tracking cookies.

You can block or delete cookies through your browser settings at any time; the website will continue to work.

Under UK data protection law you have the right to access the personal information we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive a portable copy of it.

To exercise any of these rights, email enquiries@theriskreviewgroup.co.uk. We respond within one month.

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We review this notice from time to time and post any changes on this page. It was last updated in October 2026.