Legal
Privacy policy
Last updated: 4 September 2026
Who we are
Drummond Leonardes Partners is the data controller for information submitted through this website. Contact details are set out in the footer.
What we collect
The information you provide through the mandate form — name, work email, entity, buyer type, target sectors and geography, EBITDA range, source of funds and any notes — together with a timestamp, the originating IP address and a mandate reference.
Payment data
Card payments are processed by Stripe. We never receive or store card numbers. Stripe returns to us only a session identifier and a payment status.
Why we process it
To assess whether we can act on the mandate, to prepare the engagement agreement, and to correspond with you about it. We rely on your consent, given when you submit the form, and on our legitimate interest in responding to business enquiries.
Outreach data
In the course of a mandate we process business contact information relating to companies and their owners. We maintain a permanent suppression list and honour every opt-out request on receipt.
Analytics and cookies
We do not use Google Analytics and set no non-essential cookies. There is therefore no cookie banner on this site.
Sharing
We do not sell personal data. We share it only with the service providers necessary to operate the site, take payment and correspond with you, under appropriate agreements.
Retention
Mandate data is retained for the duration of the engagement and for the tail period that follows it, then for as long as required to meet legal and accounting obligations.
Your rights
You may request access to, correction of, or deletion of your personal data, and may withdraw consent at any time. Residents of California and other US states with equivalent statutes have the same rights under those laws.
Transfers
Fonts are self-hosted and no content is loaded from third-party content delivery networks. Data is processed in the European Economic Area and, for payment only, in the United States by Stripe.