Privacy notice.
Why you are reading this.
You have probably received an email from Retibo. We contacted you in your business role at an SRA-regulated law firm, using information we did not collect from you directly. UK data-protection law (UK GDPR Article 14) requires us to tell you what we hold, where we got it, and your rights, including your unconditional right to tell us to stop. This notice does that.
Who we are.
Retibo is operated by Retibo Limited, a company registered in England & Wales with company number 17103159. Registered office: Bartle House, 9 Oxford Court, Manchester M2 3WQ, United Kingdom. Retibo Limited is registered with the Information Commissioner’s Office under registration number ZC188607. You can reach us about anything in this notice at hello@retibo.com. We make compliance-assurance software for SRA-regulated UK law firms, and we contact firms we believe the product is genuinely relevant to.
What we hold, and where it came from.
We hold business-capacity information only. We use the regulatory information to identify and research firms our product is relevant to; the contact details we actually send to are taken from the firm’s own published pages or Companies House, and we record the source of every contact detail we use. We do not buy marketing lists, and we do not hold anything about a firm’s internal compliance performance.
| Data category | Examples | Typical source |
|---|---|---|
| Business identity and contact | Your name, job title and role at the firm (for example partner, COLP, MLRO, practice manager), business email address and, where published, work telephone number. | The firm's own website and its public team or contact pages. We prefer a general or role address (such as info@ or enquiries@) where the firm publishes one. |
| Regulatory and professional | SRA number, regulated status, and a publicly identified compliance role (such as COLP or COFA) where the firm publishes it. | The Solicitors Regulation Authority's public register and Firm Data service. |
| Firm and company | Firm name, company or LLP number, legal structure, registered office and trading status. | Companies House, and the firm's own website. |
| Practice and relevance | Publicly advertised practice areas (such as conveyancing, property or corporate work) and publicly stated accreditations we use to judge whether Retibo may be relevant to the firm. | The firm's own website, and the relevant public register or accreditation body. |
| Records we create | Whether and when we contacted you, any replies, demo requests, and your unsubscribe, objection or suppression status. | Created by Retibo from its own outreach and correspondence records. |
We keep the exact source of your particular details as an internal record. If you would like to know where we obtained yours, email hello@retibo.com and we will tell you.
Why we use it.
We use relevant business-contact information to identify law firms and contacts for whom Retibo may be relevant, to carry out appropriate B2B business development and outreach, to communicate about Retibo, to respond to enquiries and arrange demonstrations, to keep a record of our outreach, and to honour objections and unsubscribe requests so that people who have asked us to stop are not contacted again. We hold no special-category data, no criminal-offence data, and nothing about your private life.
Our lawful basis.
Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): introducing a directly relevant regulatory-compliance product to the businesses it is designed for, in your business capacity, from public and firm-published sources. We have carried out and documented a legitimate interests assessment balancing our interest against your rights, and you can request a summary of it using the contact details above. For electronic marketing we follow the Privacy and Electronic Communications Regulations 2003: we send to corporate subscribers (companies and LLPs), we do not send cold marketing email to sole practitioners or non-LLP partnerships, and every email identifies us and carries a working unsubscribe.
Your right to object, which always wins.
You have an absolute right to object to direct marketing (UK GDPR Article 21(2) and (3)). If you object, we stop, with no balancing test and no exceptions, and we will not use your personal data for marketing again. You can exercise it in one step: use the unsubscribe link in any email from us, or email hello@retibo.com, and we will suppress your details permanently across email and, where relevant, phone.
UnsubscribeWho we share it with.
We use Microsoft 365 to send and store our correspondence, Cloudflare to host this website, and Amazon Web Services (London region) to record unsubscribe requests. We may share your data with professional advisers where necessary and under confidentiality, or with a regulator or court where the law requires it. We never sell your data, share it with data brokers, or pass it to anyone else for their own marketing.
Where it is processed.
The unsubscribe records and other data we hold to run our outreach are processed in the United Kingdom. Some of the providers that help us (such as our email and website-hosting providers) are international organisations that may process limited data outside the UK; where that happens, it is under safeguards recognised by UK data-protection law, such as UK adequacy regulations or the providers’ standard contractual clauses. We do not sell or transfer your data for anyone else’s purposes.
How long we keep it.
We keep outreach information only as long as we need it: for the duration of the campaign and for approximately 12 months after our last contact with you, then we delete it or review whether there is still a reason to hold it. Suppression information is different, and we treat it that way on purpose. If you object or unsubscribe, we keep the minimum needed to recognise your request (typically your email address, or a one-way fingerprint of it, and the date) on a suppression list indefinitely, solely so that we can keep honouring your request and never contact you again. We will not delete that suppression record merely because we delete the rest of your details, because doing so could result in your being contacted again.
Your other rights.
Alongside your right to object to direct marketing, you have the right to ask for a copy of the data we hold about you (Article 15), to have it corrected (Article 16) or erased (Article 17), and to restrict our processing (Article 18), and you can object to our processing generally on grounds relating to your situation (Article 21(1)). Providing your information is not a contractual or statutory obligation. To exercise any of these, email hello@retibo.com; we will respond within one month and charge no fee. You can also complain at any time to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would welcome the chance to resolve your concern first, but you do not need our permission to go to the ICO.
Software and human involvement.
Software may help us with research, organisation, relevance assessment and preparing outreach material, but a person keeps control of who we contact and reviews outreach before it is sent. We make no automated decisions about you that produce legal or similarly significant effects, and we do not profile you in that sense.
Last updated: 24 August 2026.