Privacy policy
This privacy policy explains how LAVA Advisory Partners collects, uses and protects personal information when you use our website, communicat.e or interact with us, or are involved in a potential or actual transaction on which we are advising.
For the purposes of this policy, “LAVA”, “we”, “us” and “our” refers to LAVA Advisory Partners (GBR) Ltd. and Lava Advisory Partners (US) Inc., as applicable. The LAVA entity responsible for your personal information will depend on the nature of your relationship with us and the services being provided.
We are committed to protecting your privacy and handling personal information in accordance with applicable data protection and privacy laws, including the UK General Data Protection Regulation (“UK GDPR”) and Data Protection Act 2018 where applicable.
How we collect information
We may collect personal information directly from you when you contact or interact with us by email, telephone, post, through our website or social media, in person, or in connection with an engagement or potential transaction.
We may also obtain personal information from third parties and publicly available sources, including our clients, prospective buyers or investors, professional advisers, transaction counterparties, company websites, Companies House, professional networking platforms and other publicly accessible business information sources.
Certain information is collected automatically when you use our website, including information such as your IP address and information about how you interact with our website. Please see our Cookie Policy for further information.
What information do we collect?
“Personal information” means information relating to an identified or identifiable individual. Depending on your relationship with us, we may collect:
- your name, job title and company or organisation;
- business contact information, including email address and telephone number;
- professional, employment and education information contained in CVs, presentations or other materials provided to us;
- information contained in correspondence and notes of meetings or conversations;
- identification and verification information, which may include passports, driving licences or other identity documents where required;
- information required for us to meet legal and regulatory requirements, including anti-money laundering and know-your-client requirements;
- information relating to your ownership of, role in or relationship with a business;
- information provided or obtained in connection with a potential or actual transaction, including relevant financial or commercial information; and
- any other personal information you provide to us or which we reasonably obtain in the course of our business.
How and why do we use your information?
We may use personal information to:
- provide our M&A advisory and related services;
- originate, evaluate, prepare for and execute potential or actual transactions;
- identify and communicate with prospective buyers, investors, sellers, management teams, advisers and other relevant transaction participants;
- assess potential transaction opportunities and introduce opportunities which we reasonably believe may be relevant;
- conduct due diligence, valuation, research and other analysis in connection with our services;
- manage our relationships with clients, prospective clients, professional contacts and other participants in the M&A market;
- communicate information about LAVA, our services, market insights and relevant opportunities;
- comply with our legal, regulatory, compliance and risk-management obligations, including anti-money laundering requirements;
- establish, exercise or defend legal claims and protect our legitimate business interests; and
- operate, administer, secure and improve our business and website.
Our lawful bases for processing
Depending on the circumstances, we process personal information where:
- it is necessary for our legitimate interests, or those of a third party, including providing and developing our services, conducting and facilitating M&A activity, managing business relationships, identifying relevant transaction opportunities and carrying out appropriate business-to-business marketing;
- it is necessary to perform a contract with you or take steps at your request before entering into a contract;
- it is necessary to comply with a legal or regulatory obligation; or
- you have given us your consent, where consent is required.
Where we rely on legitimate interests, we consider whether our interests are proportionate and balanced against your rights and interests.
Where applicable, our direct marketing activities are also carried out in accordance with the Privacy and Electronic Communications Regulations (“PECR”). You can object to the use of your personal information for direct marketing at any time.
Who do we share information with?
Where appropriate and lawful, we may share personal information with:
- other LAVA group entities, including between our UK and US operations;
- our clients and prospective clients;
- prospective buyers, investors, sellers, portfolio companies and other actual or potential transaction counterparties;
- professional advisers, including lawyers, accountants, consultants and other advisers involved in a transaction;
- service providers that support our business, including technology, CRM, data hosting, research, communications and marketing providers;
- regulators, law enforcement agencies, courts or other authorities where required by law; and
- other parties where necessary in connection with a business sale, restructuring, merger or similar corporate transaction involving LAVA.
We only share personal information where there is an appropriate reason to do so and will seek to limit the information disclosed to what is reasonably necessary for the relevant purpose.
We do not sell personal information.
International transfers
LAVA operates internationally and advises on cross-border transactions. As a result, personal information may be accessed, processed or transferred outside the UK, including between our UK and US operations and to clients, prospective buyers or investors, advisers, service providers and other transaction participants located overseas.
Where UK data protection law applies and personal information is transferred to a country that is not covered by UK adequacy regulations, we will use an appropriate safeguard or other lawful transfer mechanism as required by applicable law.
Transfers to eligible US organisations may be made under the UK Extension to the EU-US Data Privacy Framework where the recipient is appropriately certified. Where this does not apply, we will use another appropriate transfer mechanism where required.
You can contact us if you would like further information about the safeguards used in relation to your personal information.
How long do we keep your information?
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, maintaining appropriate business and transaction records and meeting our legal, regulatory, accounting and reporting obligations.
The appropriate retention period will depend on the nature of the information, our relationship with you and any relevant legal or regulatory requirements. When personal information is no longer required, we will securely delete or anonymise it.
Your rights
Depending on the applicable law and circumstances, you may have the right to:
- request access to the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- request deletion of your personal information in certain circumstances;
- request restriction of processing in certain circumstances;
- object to processing based on legitimate interests;
- object at any time to the use of your personal information for direct marketing;
- receive certain personal information in a structured, commonly used and machine-readable format where the right to data portability applies;
- withdraw your consent at any time where we rely on consent, without affecting processing carried out before withdrawal; and
- have protections in relation to certain decisions based solely on automated processing where applicable.
These rights are not absolute and may be subject to exemptions under applicable law.
Third-party processors
We use carefully selected service providers to support our business. These providers may process personal information on our behalf and are required to handle it appropriately and securely.
Digital marketing service providers
We periodically appoint digital marketing providers to conduct marketing activities on our behalf. Our appointed providers currently include:
Prospect Global Ltd (trading as Sopro), registered in England and Wales under company number 09648733 and registered with the Information Commissioner's Office under registration number ZA346877.
We may update the service providers we use from time to time.
How to contact us
If you have any questions about this privacy policy, how we use your personal information or wish to exercise your rights, please contact:
LAVA Advisory Partners
Email: hello@lavaadvisory.com
Telephone: 020 4526 8056
If you are not satisfied with how we have handled your personal information, you have the right to complain to the Information Commissioner's Office (ICO) in relation to matters covered by UK data protection law.
Information Commissioner's Office
Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes to our business, services, legal obligations or how we process personal information. The latest version will be published on our website.
Last updated: September 2026