Privacy policy

Signalite Holding Limited (“Signalite,” “we,” “our”) is a private limited company registered in England and Wales under company number 17170176. Our registered office is 167–169 Great Portland Street, London W1W 5PF, United Kingdom.

For the purposes of UK data protection law, Signalite is the controller of personal data we collect through this website and through direct engagement.

We collect personal data in three situations:

• Intake form. Company name, your name, email address, stage of your business, a short description of what you do and what you are looking for. Submission of this form is voluntary; nothing on this site is served conditional on you providing personal data.
• Direct correspondence. Emails you send to acquisitions@signalite.uk and any documents you share with us during diligence.
• Server logs. Our hosting provider (Vercel Inc.) records standard request logs — IP address, user agent, timestamp and requested path — for security and abuse-prevention purposes. These logs are not used for marketing or profiling.

We do not set analytics cookies and we do not use third-party advertising or tracking scripts on this website. See our Cookies notice for detail.

We process the personal data you submit for the following purposes:

• To reply to your intake or email and to assess whether there is a potential acquisition fit — lawful basis: our legitimate interests in evaluating inbound opportunities, balanced against your own interest in having us reply.
• To conduct pre-acquisition diligence, if both parties agree to proceed — lawful basis: performance of a contract (or steps taken prior to entering into one) or our legitimate interests.
• To comply with UK anti-money-laundering, sanctions and tax obligations where an acquisition completes — lawful basis: legal obligation.
• To defend ourselves against legal claims and to maintain records of communications — lawful basis: legitimate interests.

Intake submissions that do not progress to a call are deleted within 24 months of submission. Diligence materials are retained for the duration of the engagement plus 6 years following the conclusion of the matter, reflecting the UK statute of limitations on contract claims. Records we are required to keep by law (for example, under AML rules) are retained for the statutory period.

We do not sell personal data. We share it only with the following categories of recipient, and only as necessary:

• Service providers who host the site and transmit intake emails, under written contracts binding them to UK GDPR-equivalent standards (currently Vercel Inc. for hosting and Resend, Inc. for transactional email delivery).
• Professional advisers — our lawyers, accountants and compliance consultants — where relevant to a specific matter.
• Regulators, courts and law-enforcement where we are legally required to disclose.

Some providers store data in the United States. Where they do, we rely on the UK Extension to the EU–US Data Privacy Framework, or on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, to legitimise the transfer.

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise any of these rights, email acquisitions@signalite.uk — we will respond within one month.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would ask you to raise any concern with us first so we can try to resolve it.

We apply reasonable technical and organisational measures to protect personal data — encryption in transit (HTTPS/TLS), encryption at rest on hosted infrastructure, least-privilege access controls on internal systems, and mandatory non-disclosure agreements before we receive sensitive diligence material. No system is perfectly secure; we would notify affected individuals and the ICO of any qualifying personal-data breach within the statutory 72-hour window.

We may update this notice from time to time. The date at the top of the page reflects the most recent revision. If we make material changes to how we process personal data, we will flag them prominently on this page.

Questions about this notice, or about how we handle your personal data, should go to acquisitions@signalite.uk or to our registered office at 167–169 Great Portland Street, London W1W 5PF, United Kingdom.