Last Updated: October 2026
The AdvT Group consists of AdvancedAdvT Limited and its direct and indirect subsidiary companies (“AdvT Group”). This Privacy Policy explains how the relevant AdvT Group company collects, uses, shares, stores and protects personal information and how individuals may exercise their privacy rights.
This Privacy Policy applies to personal information processed by AdvT Group companies for their own purposes, including through Group websites, business relationships, marketing activities and digital services. Where an AdvT Group company processes personal data solely on behalf of a customer, that processing is governed by the applicable customer agreement and data processing terms, and the customer is generally the controller.
This Privacy Policy does not apply to organisations we do not own or control. Third-party websites, products and services may have their own privacy notices.
We keep this Privacy Policy under regular review and may update it from time to time. You should check this page periodically to keep up to date with changes. Where we make a material change to how we process personal information, we will take appropriate steps to bring it to your attention where required by applicable law.
1. Contact us
If you have questions about this Privacy Policy, our use of personal information or your privacy rights, please contact:
The AdvT Group
11 Buckingham Street
London
WC2N 6DF
Email: DPO@advt-group.com
2. Who is responsible for your personal information?
The AdvT Group company that determines why and how your personal information is used is the controller. This will normally be the Business Unit with which you interact, contract or whose website, product or service you use. AdvT Group companies may also act as joint controllers or share services and systems where permitted by applicable law.
3. How we collect personal information
Direct interactions: when you meet or communicate with us, make an enquiry, complete a form or survey, subscribe for content or alerts, attend an event, apply for a role, enter into a contract, or use our products, services, websites, portals or applications.
Use of websites and services: through cookies and similar technologies, server logs, account and authentication records, device and browser information, audit and security logs, application usage, diagnostics and support interactions.
Recorded online meetings: where a meeting is recorded, we will provide an appropriate notice before recording begins. You may choose not to participate in the recording by using available controls or leaving the meeting.
Third-party and public sources: from business partners, associations, data providers and public business sources such as company websites and professional networking platforms, where there is an appropriate lawful basis.
4. Personal information we may collect
identity and business contact details, including name, job title, employer, postal address, email address and telephone number;
account, authentication, user preference and service-administration information;
technical and usage information, including IP address, device, browser, operating system, application version, cookies, logs, security records, diagnostics and crash reports;
business relationship, enquiry, sales, marketing, event, survey and communication information;
contract, transaction, payment and finance information;
support requests and records of interactions with us;
recruitment information contained in a CV or application, which may include additional identity and employment information; and
other information you choose to provide or that is necessary for the relevant product, service or relationship.
5. Use of AdvT Group services, portals and mobile applications
A number of AdvT Group Business Units provide cloud-based software, customer portals and mobile applications. We may process information required to provide, secure, maintain and support those services, including user accounts, business contact details, authentication information, device and browser information, preferences, audit and security logs, support requests and application usage information.
Digital services and user-submitted information
Certain AdvT Group Business Units provide business-to-business digital services through which authorised users may submit, store or access information within customer-controlled environments. The functionality and legal requirements applicable to each service may vary.
Where applicable to a particular service, the relevant AdvT Group company may process notices, reports, contact details and related information for the purpose of receiving, assessing and responding to reports concerning potentially illegal content or other service misuse, complying with lawful orders or regulatory obligations, operating complaint or redress processes, and maintaining appropriate records. Any such processing will be limited to what is necessary for the relevant service and applicable law.
The applicability of digital-services legislation, including Regulation (EU) 2022/2065 (the Digital Services Act), is assessed by reference to the nature, functionality and availability of the particular service. References in this Policy do not mean that every AdvT Group company or service is subject to that legislation.
6. Shared Group systems
AdvT Group companies use shared systems and services, which may include CRM platforms, support portals, service management systems, collaboration platforms, finance systems and security monitoring systems. Personal information may be stored, accessed and used within those systems by authorised personnel across AdvT Group companies where necessary for customer relationship management, B2B marketing, business development, support, service delivery, administration, security, compliance and other legitimate business purposes.
Where individuals use AdvT products, services, portals or support services on behalf of an organisation, their information may be used within shared Group systems for account administration, authentication, service delivery, support, security, compliance, reporting and customer relationship management. Access is restricted to personnel with an authorised business need and is subject to appropriate safeguards.
7. Customer-controlled data
Where an AdvT Group company processes personal data on behalf of a customer organisation, the customer is generally the controller and AdvT acts as processor. We process that data in accordance with the applicable customer agreement, data processing agreement and documented customer instructions. This does not prevent an AdvT Group company from processing business contact and relationship information for its own legitimate business purposes where permitted by law.
8. How we use personal information
respond to enquiries and fulfil requests;
provide, administer, secure, maintain, support and improve websites, products and services;
manage customer, supplier, partner and prospective customer relationships;
perform contracts and take steps requested before entering into a contract;
process transactions and payments;
provide requested communications, alerts, content and events;
carry out B2B marketing, business development and customer relationship management;
manage and analyse business contact and relationship information across Group companies and shared Group systems;
monitor security, prevent misuse, investigate incidents and comply with legal or regulatory requirements;
measure the effectiveness of communications and improve their relevance, where permitted;
consider candidates for employment; and
establish, exercise or defend legal claims.
9. Legal bases
Legitimate interests: We may use personal information where necessary for our legitimate interests or those of a third party, including operating and securing our business and services, responding to enquiries, managing business relationships, providing support, improving services, preventing misuse and carrying out proportionate B2B marketing and business development. We consider whether those interests are overridden by the individual’s rights and freedoms.
Contract: We may use personal information where necessary to perform a contract or take steps at an individual’s request before entering into one.
Legal obligation: We may use personal information to comply with laws, lawful orders and regulatory requirements.
Consent: We rely on consent where applicable law requires it. Consent may be withdrawn at any time, without affecting processing carried out before withdrawal.
10. B2B marketing
We may use business contact details and relationship information for B2B marketing, business development and customer relationship management where permitted by law. This may include information about products, services, events, industry insights and business opportunities relevant to an individual’s organisation, including offerings from other AdvT Group companies.
Business contact and relationship information may be collected, shared and maintained across AdvT Group companies through shared Group systems and a shared CRM for these purposes. Where required, we will obtain consent before sending marketing communications. In other cases, we may rely on legitimate interests, subject to applicable electronic marketing rules.
You may object to direct marketing at any time and can update your preferences or ask us to stop by using the unsubscribe method in a communication or contacting DPO@advt-group.com.
11. Sharing personal information
We do not sell or rent personal information. We may share it:
within the AdvT Group for the purposes described in this Policy;
with service providers that support our websites, systems, services and business operations, subject to appropriate contractual and security requirements;
with professional advisers, auditors, insurers, regulators, public authorities, courts or law-enforcement bodies where appropriate;
in connection with a corporate transaction, reorganisation or transfer of business, subject to appropriate confidentiality measures;
where necessary to provide a requested product or service, perform a contract, protect rights or security, or comply with law; or
with consent or as otherwise permitted by applicable law.
12. International transfers
AdvT Group companies and service providers may process personal information in different countries. Where personal information is transferred outside the UK or EEA, we use appropriate safeguards where required by applicable data protection law. Further information about relevant safeguards is available on request.
13. Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, authentication, encryption where appropriate, logging, monitoring, vulnerability management, backup and recovery procedures and information security policies. No method of transmission or storage is completely secure.
14. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, regulatory, accounting, reporting, security and contractual requirements. Retention periods vary according to the information, purpose and relevant Business Unit. Where AdvT acts as processor for a customer, retention is generally determined by the customer and the applicable agreement. Further information is available from DPO@advt-group.com.
15. Your privacy rights
Depending on where you are located and applicable data protection law, you may have rights to:
be informed about how we use your personal information;
access and receive a copy of your personal information;
correct inaccurate or incomplete personal information;
request deletion of your personal information;
restrict or object to certain processing;
receive certain personal information in a portable format;
withdraw consent where processing is based on consent;
object to direct marketing and, where applicable, certain targeted advertising, sale or sharing of personal information; and
exercise rights relating to automated decision-making and profiling.
These rights are subject to applicable law and may not apply in every circumstance. Where applicable law provides additional rights, including rights relating to sensitive personal information or non-discrimination for exercising privacy rights, we will respect those rights.
To exercise a right, contact DPO@advt-group.com and specify the right you wish to exercise. Please provide sufficient information to enable us to identify the relevant personal information and respond. We may request information reasonably necessary to verify your identity or authority. We will respond within the period required by applicable law and explain if we cannot comply with all or part of a request.
16. Cookies and analytics
Our websites may use cookies and similar technologies to operate, secure and improve the website, understand usage and, where permitted, support analytics or marketing. Where consent is required for non-essential technologies, we will request it through the relevant cookie controls. Further details should be provided in the cookie notice for the relevant website.
17. Other websites
Our websites and services may link to third-party websites or services. We do not control those third parties and are not responsible for their privacy practices. You should review their privacy information before providing personal information.
18. Complaints
If you have concerns about how we have handled personal information or a rights request, please contact DPO@advt-group.com first so that we can investigate. You may also complain to the Information Commissioner’s Office or another competent data protection authority where applicable.
19. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to our businesses, services, processing activities or applicable law. You should check this page periodically. Where a material change affects how we process personal information, we will take appropriate steps to bring it to your attention where required by law.
