Privacy Policy
 

Last updated: August 2026
 

1. Who We Are

ELC Group operates as a transatlantic private mandate office and advisory practice, integrating strategic estate creation, land development coordination, academic governance, and global family mobility services across the United Kingdom and North America.
 

In this policy, “ELC Group”, “Crown Bridge”, “we”, “us”, and “our” refer to Crown Bridge Consulting Ltd (operating as ELC Group), a company registered in England and Wales under company number 17241687, whose registered office is at: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
 

For data-protection purposes under UK GDPR, EU GDPR, and applicable Canadian privacy legislation (including PIPEDA), Crown Bridge Consulting Ltd acts as the primary data controller for personal information collected through ELC Group and its operational desks in London and Toronto.
 

Contact Information

• Privacy Email: privacy@crownbridgeconsulting.com

• General Enquiries: elc-group@mail.com

• ICO Registration Reference: ZC223896

• Registered Address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
   

2. Scope of This Policy

This policy explains how we collect, use, disclose, store, and protect personal information when you:
 

• Visit or interact with our primary digital portals, including www.elc-group.ca and [www.crownbridgeconsulting.com](https://www.crownbridgeconsulting.com);

• Submit an inquiry or request a private diagnostic consultation;

• Engage our private mandate services across our core governance pillars:
   

  1. Estate, Land Procurement & Development Coordination (Canada)

  2. Academic Governance & Pastoral Stewardship (CrownBridge / CrownCare™)

  3. Strategic Mobility, Legal Protection & Executive Relocation

  4. Global Asset Logistics & Freight Coordination
      

• Communicate or collaborate with us as a family office, private bank, trustee, educational institution, professional adviser, supplier, or strategic partner; or

• Otherwise provide personal information to us.
   

Where a separate formal engagement letter, mandate agreement, or just-in-time privacy notice applies, it should be read in conjunction with this policy.
 

3. Personal Information We Collect

Depending on the nature of your mandate and relationship with us, we may collect:
 

• Identity and Contact Information: Full names, titles, dates of birth, residential addresses, contact details, nationality, citizenship, passport or official identity credentials, signatures, and details of family members, dependants, household staff, trustees, and authorized representatives.

• Estate, Land & Asset Information (Canada & International): Details of real estate holdings, land procurement objectives, property specifications, custom build requirements, municipal re-zoning records, collections, inventories, access arrangements, and associated insurance or security requirements.

• Academic & Pastoral (CrownCare™) Information: Educational history, school and university applications, progress reports, pastoral notes, attendance records, family reporting preferences, and information required for high-touch student mentoring and welfare monitoring.

• Relocation, Travel & Mobility Information: International travel schedules, accommodation preferences, family transition plans, visa or citizenship records, and coordination details shared with regulated immigration counsel (RCIC/SRA), legal representatives, or global mobility partners.

• Financial, Transaction & Compliance Information: Billing details, fee structures, bank details, invoice histories, source-of-funds verification records (where required under anti-money laundering regulations), and transaction history. (Note: We do not store complete payment card details).

• Professional & Institutional Information: Professional titles, organizational affiliations, credentials, due-diligence records, and correspondence with private family offices, banks, diplomatic desks, and corporate partners.

• Technical & Digital Information: IP addresses, browser types, device identifiers, website activity logs, security logs, referral sources, and consent records gathered through our web platforms.

• Special Category & Sensitive Information: Where strictly necessary to execute a specific mandate (e.g., student safeguarding, medical emergency protocols, security assessments, or travel/immigration filings), we may receive information regarding health, dietary needs, or background check disclosures (such as DBS checks). We apply heightened technical and organizational protections to all sensitive data.
   

4. Information Concerning Children & Young Persons

Certain academic, mentoring, and pastoral care services (such as CrownCare™) directly involve children or young adults.

We strictly contract with, take instructions from, and report to parents, legal guardians, or authorized family representatives. The adult providing such information warrants that they hold legal authority to disclose details regarding the minor.

Where appropriate to their age and understanding, we may communicate directly with young people in connection with their pastoral care and academic progress. We do not engage in automated profiling or behavioral marketing directed at children.
 

5. How We Collect Personal Information

We obtain personal information through:
 

• Direct Interaction: Personal introductions, direct executive communications via email or LinkedIn, consultation forms, and client meetings;

• Authorized Representatives: Family offices, parents, legal counsel, trustees, employers, or appointed advisors;

• Institutional Partners: Educational institutions, property developers, municipal offices, regulated immigration specialists, and logistics contractors;

• Public & Regulatory Sources: Public property registries, corporate registers, professional directories, and reputable background verification services; and

• Digital Technologies: Web analytics, secure communication channels, and client scheduling platforms.
   

6. Lawful Bases for Processing

Under UK GDPR and applicable data protection laws, we process personal information based on the following legal grounds:
 

Purpose Lawful Basis

Responding to mandate inquiries & consultations
Steps requested prior to entering a contract; Legitimate business interests.

Delivering bespoke private mandates & client services
Execution of contract; Legitimate interests of the client/beneficiaries.

Coordinating third-party specialists (Land, Legal, Academic)
Contractual performance; Explicit consent where required.

Billing, financial accounting & regulatory compliance
Legal obligation; Contract performance.

Safeguarding, pastoral care & medical emergency protocols
Legitimate interests; Protection of vital interests.

Establishing or defending legal rights
Legitimate interests; Legal claims establishment.
 

7. Direct Executive Outreach & Non-Automated Processing

In alignment with our operational philosophy, ELC Group explicitly rejects automated algorithms, AI-driven filtering, and automated candidate/client profiling.

All inquiries, executive talent submissions, and institutional partnership proposals submitted to ELC Group are personally reviewed by executive officers (Luiza Cölsmann). We do not subject individuals to decisions based solely on automated processing that produce legal or significant effects.
 

8. Data Sharing & Third-Party Coordination

To execute complex, cross-border mandates, we may share information on a strict need-to-know basis with:
 

• Regulated Professional Advisers: Regulated Canadian Immigration Consultants (RCIC), UK SRA-regulated solicitors, tax attorneys, accountants, and land lobbyists;

• Property & Development Partners: Municipal planning offices, land surveyors, architects, and construction managers in Canada;

• Academic Institutions: Universities, elite boarding schools, admissions directors, and private tutors;

• Family Representatives: Parents, guardians, single/multi-family office executives, and private wealth managers;

• Logistics & Asset Contractors: Secure freight handlers, luxury travel providers, and private security teams; and

• Legal & Regulatory Authorities: Law enforcement bodies, tax authorities (HMRC / CRA), or courts where strictly mandated by applicable law.

We explicitly confirm that ELC Group does not sell, rent, or trade personal data to third parties for marketing purposes.
 

9. Transatlantic & International Data Transfers

Because ELC Group operates across a transatlantic corridor anchored in London and Toronto, personal information may be transferred between the United Kingdom, Canada, the European Union, and other international jurisdictions.

When transferring data internationally:

• Transfers between the UK, EU, and Canada are supported by official adequacy decisions (recognizing Canada’s commercial data protection standards under PIPEDA);

• Where required, we implement standard contractual clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or specific contractual safeguards to guarantee data security.
   

10. Data Retention

We retain personal information only for as long as necessary to fulfill the purpose for which it was gathered, including legal, accounting, tax, and risk management requirements:
 

• Unprogressed Mandate Inquiries: Retained for up to 24 months following last contact.

• Client & Mandate Records: Retained for 7 years following the termination of the client relationship.

• Financial & Tax Records: Retained for 6 to 7 years in accordance with UK HMRC and Canadian CRA statutory rules.

• Pastoral & Student Safeguarding Files: Retained according to statutory safeguarding guidelines and risk management assessments.
   

11. Data Security & Confidentiality

We deploy robust technical, physical, and organizational security measures to protect high-net-worth client data, sensitive land documents, and student records from unauthorized access, alteration, or disclosure.

Given the sensitive nature of private mandate work, executive communications are restricted to encrypted, secure channels.
 

12. Your Legal Rights

Subject to local privacy laws (UK GDPR / PIPEDA), you hold the right to:
 

• Access: Request a copy of the personal information we hold about you.

• Correction: Request the rectification of inaccurate or incomplete records.

• Erasure ("Right to be Forgotten"): Request the deletion of data where legal retention periods have expired.

• Restriction & Objection: Object to processing based on legitimate interests or request processing limits.

• Data Portability: Request transfer of structured data to another provider.

• Withdraw Consent: Withdraw consent at any time where processing was based on consent.

To exercise any right, please contact: privacy@crownbridgeconsulting.com
 

13. Regulatory Complaints

If you have concerns regarding our data handling, we invite you to contact us directly so we may address the matter.

You also retain the right to lodge a formal complaint with the relevant supervisory body:

• United Kingdom: Information Commissioner’s Office (ICO) | ico.org.uk | +44 303 123 1113

• Canada: Office of the Privacy Commissioner of Canada (OPC) | priv.gc.ca