Privacy notice
Last updated 15 October 2026
This notice explains how Collar & Core uses personal information about the people we deal with: mining company directors and staff, investors and their representatives, and visitors to our website and project rooms.
Who is responsible for your information
The controller is Nova Summits Limited, trading as Collar & Core, company number 14358898, registered office 4 King Square, Bridgwater, Somerset TA6 3YF, United Kingdom. For anything about your personal information, email hello@collarandcore.com with "Privacy" in the subject line.
What we collect
- Contact details: your name, job title, organisation, email address, phone number and location.
- Enquiry and relationship details: what you tell us when you contact us, notes of meetings and calls, the projects or investments you are interested in, and the introductions we make.
- Investor information: the types of investment you make, typical ticket size, and your investor category and the statement you sign to confirm it (for example certified high net worth or sophisticated investor).
- Checks: where we need them, identity and background information to check who we are dealing with, including checks against public sanctions lists.
- Website and project room data: technical information our hosting provider records when you visit, such as your IP address, browser type and the pages requested, kept in server logs for security.
We collect most of this from you directly. We also use public sources such as company registers, stock exchange announcements, company websites and professional networking profiles, and information passed to us by people who introduce you to us.
We do not want to receive special category data (such as health or political opinions) or information about criminal convictions, and we ask you not to send it.
Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and discussing whether we can work together | Our legitimate interests in running our business, or steps you ask us to take before entering a contract |
| Providing our services to companies under a mandate | Performance of a contract with the company, and our legitimate interests |
| Introducing companies and investors to each other | Our legitimate interests in making relevant introductions. We only pass your details to the other side when you have agreed to the introduction |
| Confirming investor categories and making sure our communications reach only people they may lawfully be sent to | Legal obligation and our legitimate interests |
| Identity and sanctions checks | Legal obligation and our legitimate interests in preventing fraud and financial crime |
| Sending business updates about our services and new projects | Our legitimate interests for business contacts, with an easy way to opt out in every message; your consent where the law requires it |
| Keeping the website and project rooms secure | Our legitimate interests |
| Keeping records and dealing with legal claims | Legal obligation and our legitimate interests |
Who we share it with
- Companies and investors: when you agree to an introduction, we share the details needed for it with the other party.
- Service providers: our email, web hosting, file storage and customer relationship providers, who process information on our instructions. Enquiries sent through our website form are received and stored for us by Formspree, a form-handling service based in the United States, which forwards them to us by email.
- Professional advisers: our lawyers, accountants and any authorised firm involved in a transaction, where needed.
- Authorities: regulators, law enforcement or courts where the law requires it.
- A buyer of our business: if Nova Summits Limited or the Collar & Core business is sold or restructured.
We do not sell personal information.
International transfers
We work with companies and investors in many countries, including Africa, Australia, Canada, the Gulf and Asia. When we transfer personal information outside the UK, we make sure it is protected: by transferring to a country the UK recognises as adequate, by using the UK International Data Transfer Agreement or Addendum, or, for an introduction you have asked for, because the transfer is necessary for it.
How long we keep it
- Enquiries that do not lead to work: up to two years after our last contact.
- Records of mandates, introductions, investor statements and checks: six years after the end of the relevant engagement, in line with limitation periods.
- Server logs: up to 90 days.
- Marketing preferences: for as long as you stay on our list, and a suppression record if you opt out so we do not contact you again.
Your rights
Under UK data protection law you can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or transfer it to someone else. You can object at any time to our use of your information for direct marketing, and object to other uses based on our legitimate interests. Where we rely on consent, you can withdraw it at any time.
To use any of these rights, email hello@collarandcore.com. We will reply within one month.
If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Security
We use access controls, encrypted connections and reputable providers to protect your information, and we limit access to people who need it. No system is completely secure, so please do not send us sensitive documents by unencrypted email unless we have agreed how to do so.
Cookies
Our website does not use advertising or analytics cookies. See our cookie notice for details.
Changes
We will update this notice when our practices change. The date at the top shows the current version.