Privacy notice.
This notice explains what personal data we collect through this website, why we collect it, and your rights over it.
Last updated 21 October 2026
Who we are
The Sandhu Group is a trading name of DS & GK Holdings Ltd (“we”, “us”), the controller of personal data collected through this website. We are registered in England and Wales, company number 16823444, with our registered office at Ramillies House, 1–2 Ramillies Street, London W1F 7LN.
For anything about your data, email hello@sandhu.group.
What we collect
We only collect what you choose to send us, plus the minimum needed to run the site securely.
- Enquiries: your name, email address, the service and city you select, and your message.
- Job applications: your name, email address, phone number (if given), the role you are applying for, any profile or CV link you include, and your message.
- Technical data: our hosting provider keeps standard server logs (IP address, browser type, pages requested and time of request) to keep the site secure and working.
- Your cookie choice: stored on your own device. See our cookie policy.
Please do not include sensitive information, such as health details, in a message unless it is necessary.
How we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and any follow-up | Legitimate interests in responding to people who contact us, or steps you ask us to take before entering a contract |
| Assessing a job application | Steps before entering a contract of employment, and legitimate interests in recruiting |
| Keeping the website secure and working | Legitimate interests in running a secure website |
| Analytics, if we introduce it | Your consent, which you can withdraw at any time |
We do not use your data for automated decision-making or profiling, and we do not sell it.
Who we share it with
We share personal data only with service providers who help us run the site and our business, and only as far as they need it:
- FormSubmit (formsubmit.co), which delivers messages sent through our forms to our inbox. It receives what you type into the form and your IP address.
- Our email provider, which stores the messages we receive.
- Our website host, which serves the site and keeps its server logs.
- Professional advisers, such as lawyers or accountants, where necessary.
- Authorities, where the law requires it.
International transfers
Some of our providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or on the safeguards in the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Enquiries: up to two years after our last contact, unless we go on to work together.
- Job applications: six months after the role is filled, or six months from receipt for speculative applications, unless you agree to us keeping them longer.
- Server logs: as set by our host, usually no more than 30 days.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- have it corrected if it is wrong
- have it erased
- restrict or object to how we use it
- receive it in a portable format
- withdraw consent at any time, where we rely on it
To use any of these rights, email hello@sandhu.group. There is usually no fee, and we will reply within one month.
Complaints
If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Security
The site is served over an encrypted connection, and access to the messages we receive is limited to the people who need them.
Changes to this notice
We will update this page if our practices change. The date at the top shows when it last changed.
Common questions.
Who controls the personal data collected on this website?
DS & GK Holdings Ltd, trading as The Sandhu Group, registered in England and Wales (company number 16823444), with its registered office at Ramillies House, 1–2 Ramillies Street, London W1F 7LN.
What data do you collect when I send an enquiry?
Your name, email address, the service and office you select, and your message.
How long do you keep enquiries and job applications?
Enquiries are kept for up to two years after our last contact, unless we go on to work together. Job applications are kept for six months after the role is filled, or six months from receipt for speculative applications.
Do you sell my data or use it for profiling?
No. We do not sell personal data, and we do not use it for automated decision-making or profiling.
How do I access or delete my data?
Email hello@sandhu.group. There is usually no fee, and we reply within one month.
Who can I complain to about how my data is used?
Please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.