Privacy Policy
Last updated: 14 August 2026
1. Who we are
Barracuda Consulting Limited, trading as RAN Corporate Finance, is the controller of personal data processed through this website and in connection with enquiries. Company number: 12902221. Registered office: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF.
Privacy contact: deals@rancf.com
2. Personal data we collect
Depending on how you interact with us, we may collect and process:
We may share personal data with website hosting and form-processing providers, the selected corporate email provider, professional advisers, IT and security providers, and public authorities where required by law. Transaction information may be shared with prospective counterparties and their advisers only where necessary and subject to the relevant mandate, approval and confidentiality process. We do not sell personal data.
- Identity and contact information, including your full name, business email address and telephone or WhatsApp number.
- Professional and organisational information, including your company, role or title and primary geography.
- Enquiry and communication information, including the content of your message, the services or transaction discussed, correspondence, meeting notes and follow-up communications.
- Mandate and transaction information, where an enquiry progresses, including acquisition or investment criteria, information about the relevant business or asset, your role and authority in the transaction, transaction documents and due diligence materials.
- Corporate, ownership and compliance information, where necessary and lawful, including information concerning directors, shareholders, beneficial owners and authorised representatives, as well as regulatory, sanctions, politically exposed person and adverse-media information.
- Information obtained from your organisation, counterparties, professional advisers, public registers, regulatory websites and other lawful public or commercial sources.
- Technical and security information processed when you use the Website, which may include IP address, timestamps, browser and device information, server logs and security events.
- Aggregate website analytics information, including visits, page views, referring websites, approximate country, device and browser type, and website performance metrics, as further described in section 9.
3. How and why we use personal data
We may use personal data for the following purposes and lawful bases:
We may share personal data with website hosting and form-processing providers, the selected corporate email provider, professional advisers, IT and security providers, and public authorities where required by law. Transaction information may be shared with prospective counterparties and their advisers only where necessary and subject to the relevant mandate, approval and confidentiality process. We do not sell personal data.
- To receive, assess and respond to enquiries. We rely on our legitimate interests in managing relevant business enquiries and, where applicable, taking steps requested by you before entering into a contract.
- To verify identity, professional role, authority, transaction relevance and potential conflicts. We rely on our legitimate interests in qualifying enquiries and protecting RAN Corporate Finance and the parties involved.
- To prepare and administer NDAs, mandates and other agreements, coordinate introductions, manage controlled disclosure and support transactions. We rely on contractual necessity where the contract is directly with you and, in other cases, our legitimate interests in providing services to your organisation and coordinating the relevant transaction.
- To conduct proportionate due diligence, fraud-prevention, sanctions, politically exposed person, adverse-media and other compliance checks where appropriate. We rely on legal obligations where they apply and otherwise on our legitimate interests in managing transaction, reputational and counterparty risk.
- To maintain business, transaction, accounting, invoicing and tax records. We rely on contractual necessity, applicable legal obligations and our legitimate interests in maintaining accurate records.
- To operate and secure the Website, prevent misuse, troubleshoot problems and protect our systems. We rely on our legitimate interests in maintaining a secure and reliable Website.
- To establish, exercise or defend legal claims and enforce our agreements and Website terms. We rely on our legitimate interests and applicable legal obligations.
- To send relevant professional communications, mandate updates or information about our services where permitted by law. We rely on legitimate interests or consent where consent is required. You may opt out of such communications at any time.
Where consent is the appropriate lawful basis, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.
4. Sharing personal data
We may share personal data with website hosting and form-processing providers, the selected corporate email provider, professional advisers, IT and security providers, and public authorities where required by law. Transaction information may be shared with prospective counterparties and their advisers only where necessary and subject to the relevant mandate, approval and confidentiality process. We do not sell personal data.
5. International transfers
Some service providers, including Webflow, may process personal data outside the United Kingdom or European Economic Area. Where required, we use recognised safeguards such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or approved standard contractual clauses.
6. Retention
Enquiries that do not progress are normally retained for up to 24 months after the last meaningful contact. Mandate, transaction, contract, compliance and dispute records may be retained for up to seven years after the relevant engagement ends, or longer where law or an active claim requires it. Technical logs are retained only for as long as reasonably necessary for security and administration.
7. Your rights
Depending on the applicable law, you may have rights to access, correct, erase or restrict personal data, object to processing, receive portable data and withdraw consent. You may also complain to the UK Information Commissioner’s Office or, where the EU GDPR applies, to your local supervisory authority. Contact us first at the privacy email above if you wish to exercise a right.
8. Automated decisions, security and updates
We do not use website enquiry data for solely automated decisions that produce legal or similarly significant effects. We use proportionate organisational and technical safeguards, but no internet transmission is completely secure. We may update this policy when our services, providers or legal obligations change; the current version will be published on this website.
9. Website analyticsWe use Cloudflare Web Analytics to understand aggregate website traffic and performance. The service provides us with information such as visits, page views, referring websites, approximate country, device and browser type, and website performance metrics. Cloudflare states that Web Analytics does not use cookies, localStorage or sessionStorage and does not collect or use visitors’ personal data for analytics. Source IP addresses received through normal network operations are discarded at Cloudflare’s edge and are not stored in its core databases or logs. We use this aggregate information to understand how the Website is found and used and to improve its performance.Cloudflare Privacy Policy
