This Privacy Policy explains how Greyline Investigations Limited collects, uses, stores, and protects your personal data. We are committed to handling all personal information with the utmost care, in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Greyline Investigations Limited is a professional OSINT and digital intelligence agency providing investigation services to clients across the UK, Nigeria, and internationally. We are a company incorporated in England and Wales (Company Number 17121990) and operate as the data controller in respect of personal data processed through our website and client engagements.
Where we process personal data relating to the subject of an investigation on behalf of a client, we act as a data processor on that client's instructions. In all other respects we are the data controller.
2.1 Data you provide directly
2.2 Data we collect automatically
2.3 Data about third parties (investigation subjects)
When conducting investigations, we process personal data about the subject of the investigation. This data is collected from publicly available open sources only (OSINT). We do not access private accounts, intercept communications, or obtain data through unlawful means. The legal basis for processing this data is our legitimate interests in providing the contracted service and, where relevant, the vital interests or legal claims of the commissioning client.
We process personal data only where we have a valid legal basis under UK GDPR:
We use personal data for the following purposes:
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data in the following limited circumstances:
We will never disclose your identity or case details to the subject of an investigation without your express prior written consent.
Greyline serves clients globally, including in Nigeria, the USA, Canada, and Australia. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V, including:
For Nigerian client engagements, we additionally adhere to the Nigeria Data Protection Act 2023 (NDPA) requirements where applicable.
We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law:
On expiry of the retention period, data is securely and permanently deleted from all systems and backups.
You have the following rights in relation to your personal data:
To exercise any of these rights, contact us at cases@greylineinvestigations.co.uk. We will respond within one calendar month. We may need to verify your identity before processing your request.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO without undue delay and within 72 hours of becoming aware of the breach, as required by UK GDPR Article 33.
Our website may use essential cookies and standard web server logging to ensure the site functions correctly and to understand aggregate visitor patterns. We do not use advertising, tracking, or third-party analytics cookies. For full details, see our Cookie Policy.
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data about a child, please contact us immediately at cases@greylineinvestigations.co.uk and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The current version will always be available on our website. We will notify active clients of any material changes by email.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how we handle your personal data, please contact us:
We take all privacy enquiries seriously and aim to respond within five working days.