Effective Date: 31/01/2025

Scope: This Privacy Policy explains how we collect, use, store, and protect personal information when providing private investigation services in accordance with UK GDPR and the Data Protection Act 2018.

• Business Name: The PI Org
• Address: Canary Wharf, Level 18, 40 Bank Street, Docklands, E14 5NR
• Email: private@thepi.org.uk
• Telephone: 0333 070 4353

We act as the Data Controller for personal information processed during investigations and client interactions.

• Name, address, email, telephone number
• Case‑related information
• Documents or evidence supplied by you
• Information relevant to an investigation (including statements, photos, or digital evidence)
• 
  

• IP address, browser type, device information
• Website usage data and cookies
  These categories align with standard UK privacy policy requirements. 
• 
  

Some investigations may involve:

• Health information
• Biometric identifiers
• Criminal offence data
  We only process such data where legally permitted and strictly necessary. 
• 
  

We use personal information to:

• Respond to enquiries
• Verify client identity
• Conduct lawful investigations
• Produce investigation reports
• Communicate with clients
• Prevent fraud or misuse
• Comply with legal obligations
• Maintain business records
  These uses reflect lawful and typical processing for investigative services. 

Under Compliance with UK GDPR, we rely on:

• Legitimate Interests: Conducting investigations, managing client relationships, preventing fraud
• Contract: When processing is necessary to fulfil a service agreement
• Legal Obligation: Compliance with court orders or statutory requirements
• Consent: For optional activities such as marketing
  These bases follow UK GDPR requirements. 
• 
  

We may share personal information with:

• Legal representatives
• Law enforcement (where legally required)
• Specialist service providers (e.g., forensic analysts)
• Courts or tribunals
  We never sell personal information. 
• 
  

If data is transferred outside the UK, we use approved safeguards such as the International Data Transfer Agreement (IDTA). 

We retain personal information only as long as necessary for:

• The investigation
• Legal or regulatory requirements
• Business record‑keeping
  Retention periods must be clearly defined and proportionate.

We implement:

• Secure storage systems
• Access controls
• Encryption where appropriate
• Regular security reviews
  These measures protect personal information from unauthorised access or loss. 

Under UK GDPR, individuals have the right to:

• Access their personal data
• Request correction or deletion
• Object to processing
• Request restriction of processing
• Data portability (where applicable)
• Withdraw consent (where applicable)
  These rights must be clearly communicated under Articles 12–14 UK GDPR.
• 
  

We do not use automated decision‑making or profiling in investigative services. 

Our website may use cookies for functionality, analytics, and security. Users can manage cookie preferences through their browser settings.

We may update this Privacy Policy periodically. The latest version will always be published on our website.

If you have concerns about how we handle your data, you may contact:
Information Commissioner’s Office (ICO)

The ICO is the UK’s independent regulator for data protection.

This policy reflects UK GDPR and Data Protection Act 2018 requirements for private investigation services.