Privacy Policy

Blue Rock Investigations Last updated: 16/07/2026

1. Who We Are

Blue Rock Investigations ("we", "us", "our") is a private investigation agency registered in England and Wales under company number 17344584, with its registered office at 57, Blue Rock Drive, Aylesbury, HP18 1AW

We are the data controller for the personal data described in this policy. If you have any questions about this policy or how we handle your data, you can contact us at:

  • Email: enquiries@bluerock-investigations.co.uk

This policy explains how we collect, use, store, and share personal data in connection with our website https://www.bluerock-investigations.co.uk/ and our investigation services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Nature of Our Work

Blue Rock Investigations provides private investigation services, which may include tracing, surveillance, background checks, due diligence, fraud investigation, and related services. Because of the nature of this work, we may process personal data about:

  • Clients who instruct us

  • Subjects of investigation, who have not usually given us their data directly and may be unaware we hold it

  • Third parties connected to an investigation (witnesses, associates, family members, etc.)

Where we process data about individuals who are not our clients, we may be unable to provide certain information rights (such as the right to be informed at the point of collection) where doing so would prejudice the investigation, in reliance on exemptions under the Data Protection Act 2018 (including the crime and taxation exemption and exemptions relating to legal proceedings). We assess this on a case-by-case basis.

3. Personal Data We Collect

Depending on your relationship with us, we may collect:

  • Identity data: name, date of birth, photographs

  • Contact data: address, email, phone number

  • Client account data: billing details, case references, correspondence

  • Investigation data: information gathered in the course of an instruction, which may include location data, vehicle details, employment details, financial information, associations, and — where relevant and lawfully obtained — special category data (e.g. health data) or criminal offence data

  • Website usage data: IP address, browser type, pages visited, and similar technical data (see our Cookies Policy)

  • Enquiry data: information you provide when contacting us via forms, email, or phone

We collect data directly from clients, from publicly available sources, from third parties (e.g. other investigators, public records, open-source intelligence), and through our own investigative activities, always with regard to necessity, proportionality, and lawfulness.

4. How We Use Your Data and Our Legal Basis

PurposeLegal BasisProviding investigation services under a contract with a clientPerformance of a contractCarrying out investigative activity relating to a subjectLegitimate interests (of us or our client), pursued in a manner that is proportionate and minimally intrusiveComplying with legal or regulatory obligations, including requests from law enforcement or courtsLegal obligationPreventing or detecting crime, including fraudLegitimate interests / substantial public interest (crime prevention)Responding to enquiries and managing our client relationshipsContract / legitimate interestsOperating and improving our websiteLegitimate interests / consent (for non-essential cookies)Marketing communicationsConsent, or legitimate interests where permitted, with an opt-out available at all times

Where we rely on legitimate interests, we have considered the balance between our interests (or our client's) and the rights and freedoms of the individual concerned, and we take steps to ensure our methods are lawful, necessary, and proportionate to the purpose of the investigation.

We do not use automated decision-making or profiling that produces legal or similarly significant effects about individuals.

5. Sharing Your Data

We may share personal data with:

  • Clients, in the form of investigation reports and findings, as instructed

  • Subcontracted investigators or agents acting on our behalf, under confidentiality obligations

  • Law enforcement, courts, or regulatory bodies, where required by law or in connection with legal proceedings

  • Professional advisers (e.g. solicitors, accountants, insurers)

  • IT and service providers who support our operations (e.g. hosting, case management software), under data processing agreements

We do not sell personal data to third parties.

6. International Transfers

Where any of our service providers are based outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or Standard Contractual Clauses (including the UK's International Data Transfer Addendum).

7. Data Retention

We retain personal data only for as long as necessary for the purposes it was collected, including to satisfy any legal, accounting, or reporting requirements. Investigation files are typically retained for [RETENTION PERIOD, e.g. 6 years] after case closure, in line with our regulatory and insurance obligations, after which they are securely destroyed or anonymised. Retention periods may vary depending on the nature of the case.

8. Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure, including access controls, encryption where appropriate, and staff confidentiality agreements. Given the sensitive nature of our work, we apply enhanced safeguards to investigation files.

9. Your Rights

Subject to certain exemptions (including those relevant to ongoing investigations, as noted in Section 2), you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request erasure of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time, where processing is based on consent

  • Complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113

To exercise your rights, contact us using the details in Section 1. We may need to verify your identity before responding, and we will respond within one month unless the request is complex, in which case we may extend this by a further two months.

10. Cookies

Our website uses cookies. Details of the cookies we use and how to manage them are set out in our Cookies Policy.

11. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted where appropriate.

12. Contact Us

If you have any questions or concerns about how we handle your personal data, please contact us at enquiries@bluerock-investigations.co.uk,