Privacy notice.
This notice explains how Borough and Field Ltd., trading as Borough & Field, collects and uses personal information. Borough and Field Ltd. is the data controller. We are registered in England and Wales under company number 17427557. Our registered office is 23 Montague Road, Uxbridge, England, UB8 1QL. Privacy questions and rights requests can be sent to enquiries@boroughandfield.co.uk.
Last updated: 21 September 2026.
Information we collect
We collect the contact, organisation, property, local-authority, reference, deadline and matter details you choose to submit. If you use the optional AI-assisted triage, we also process the conversation and any summary you choose to send for human review. We process correspondence, proposal and engagement records, complaints, and limited technical and security information generated when the website or email service is used. Please do not send original documents or unnecessary sensitive personal information through the public form or triage assistant.
How and why we use it
We use enquiry information to respond, assess fit and potential conflicts, identify urgency, prepare a proposal, deliver an agreed service and keep appropriate professional and business records. Our lawful bases are taking steps at your request before entering a contract, performing a contract, complying with legal obligations, and our legitimate interests in operating the consultancy, maintaining security, managing conflicts, complaints and potential claims, and improving our service. Where consent is specifically required for a future activity, such as optional marketing, it will be requested separately and may be withdrawn.
Who receives information
Information may be handled by our website hosting and infrastructure providers, OpenAI when you choose to use the optional AI-assisted triage and when authorised staff use public-source contact research in the private back office, Resend for transactional email, Google Workspace for business email, and professional, legal, accounting or technology advisers where necessary. Chat messages are sent to OpenAI to generate the assistant's responses. Back-office contact research may send an organisation name, property address, public reference and source link to OpenAI to locate publicly published business contact information; results remain subject to human review before use. If a matter requires an external specialist, we will explain their role before sharing information unless disclosure is otherwise required by law. We do not sell personal information.
International processing
Some technology providers may process information outside the UK. Where this occurs, we require an appropriate legal transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, together with proportionate security measures.
Retention
Enquiries that do not become client matters are normally retained for 12 months. Client and engagement records are normally retained for six years after the engagement ends. Complaint records are normally retained for six years after closure. Security and suppression records are kept only for as long as reasonably necessary. A longer or shorter period may apply where law, an active dispute, insurance requirements or the nature of a matter requires it.
Your rights
Depending on the lawful basis and circumstances, you may have rights of access, correction, erasure, restriction, objection and portability. You may object to processing based on legitimate interests. To exercise a right, email enquiries@boroughandfield.co.uk. We may need to verify your identity before acting.
Complaints
Please raise privacy concerns with us first. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority.
Marketing and outreach
Submitting an enquiry does not subscribe you to marketing. We may send relevant business-to-business correspondence to a corporate contact using publicly available business contact details where we consider our legitimate interests apply. We screen contacts before use, do not use a personal or sole-trader address for electronic marketing without consent, keep suppression records and honour objections or opt-out requests.
Analytics and cookies
We use Google Analytics and Google Ads conversion measurement to understand visits, useful pages, campaign performance and actions such as starting or completing an enquiry, clicking an email address or clicking a telephone link. With your permission, we also use Microsoft Clarity on the public website to understand clicks, scrolling, navigation patterns, usability problems and masked session replays. Information entered into enquiry forms or the triage assistant is masked and is not available in recordings. Clarity is not loaded unless you select “Accept”, and it is disabled on the private back office, sign-in pages and enquiry confirmation page.
Analytics storage is denied by default. If you select “Accept”, Google and Microsoft may use cookies or similar browser storage and receive limited technical information such as device type, approximate location derived from an IP address, referring campaign and pages visited. Advertising storage and advertising personalisation remain disabled. We do not send Microsoft Clarity names, email addresses, property addresses, references or other custom identifiers. Microsoft processes Clarity information on our behalf; further details are available in the Microsoft Privacy Statement. If you decline, optional analytics remains disabled. You can change your choice by clearing this site's stored browser data and revisiting the website.
Changes to this notice
We may update this notice when our services, providers or legal obligations change. The current version and update date will remain available on this page.