What we do with
what you send us.

Oakbey Consultancy Limited is the data controller for the personal information described in this notice. Company number 16916793, registered in England and Wales. Registered office: C/O Delta House Limited, Phoenix Business Centre, Rosslyn Crescent, Harrow, Middlesex, England, HA1 2SP. ICO registration number ZC171465.

This notice covers the OakBey.com website. It does not cover how we handle information once a relationship with a company or co-investor is under way, which is dealt with separately.

What you send us. If you use the enquiry form we receive the name, organisation, email address and location you enter, the domain and engagement stream you select, and the message you write.

Technical information that arrives with it. Your IP address, the country our host infers from it, and the time of submission. We keep these with the enquiry and use them to stop automated abuse of the form.

Server logs. Our host, Cloudflare, records standard request information for the operation and security of the site.

What we do not collect. This website sets no cookies. It runs no analytics, no advertising and no tracking of any kind, it stores nothing in your browser, and it loads no third-party scripts, fonts or embedded content. We do not build profiles, and no decision about you is made by automated means.

To answer your enquiry. Our lawful basis is legitimate interests: you have contacted us and we need your information to reply and to assess whether there is a fit. Where your enquiry leads towards an agreement, we also rely on taking steps at your request before entering a contract.

To keep the form usable. We use the IP address and timing information to limit abuse. Our lawful basis is legitimate interests: keeping our systems secure and available.

We do not use your information for marketing, and we do not add you to a mailing list.

We do not sell personal information and we do not share it for anyone else's marketing.

Your enquiry is stored on infrastructure operated by Cloudflare, Inc., which acts as our processor and handles the data only on our instructions. Cloudflare operates a global network, so information may be processed outside the United Kingdom. Those transfers are covered by the data protection terms in our agreement with Cloudflare, which incorporate the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

We may also disclose information where we are required to by law, or to establish or defend legal claims.

Enquiries are kept for 24 months from your last contact with us, then deleted automatically. We chose that period because a founder who approached us two years ago is often the same founder who comes back, and our investment horizon is long.

The short-lived records used to limit abuse of the form are deleted within an hour.

If an enquiry leads to an investment, a mandate or another ongoing relationship, the information moves into our records for that relationship and is kept for as long as we need it, including any period required by law.

Under UK data protection law you have the right to ask us for a copy of your personal information, to have it corrected or deleted, to restrict how we use it, to object to our use of it where we rely on legitimate interests, and in some cases to receive it in a portable form.

To exercise any of these, use the contact form or write to us at our registered office. We will respond within one month. We may ask you to confirm your identity first.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first so we can put it right.

The site is served only over an encrypted connection. Enquiries are transmitted over that connection and stored on access-controlled infrastructure. We publish no email address on this site, so enquiries reach us without being broadcast or scraped.

Please do not send confidential or privileged material in a first enquiry. We will tell you when there is a secure and appropriate place for it.

This website is aimed at founders, investors and institutions. It is not directed at children and we do not knowingly collect information about them.

We will update this notice when what we do changes. The date below shows when it was last revised.

Last updated 8 October 2026