Privacy policy - TDR Capital

Our commitment to privacy

Your privacy is important to TDR Capital LLP and our affiliates (together, “TDR”, “our”, “us”, or “we”). This Privacy Policy sets out how we gather, use and share information which identifies you or which makes you identifiable, including any data that you may provide to us in connection with your use of our websites (including this website at www.tdrcapital.com), our social media accounts or recruitment processes, or is collected from public or third-party sources (collectively, the “Personal Data”). As further set out in this Privacy Policy, the Personal Data may relate to individuals with whom we interact with for business purposes such as existing and prospective business partners, suppliers, consultants, or clients, recruitment candidates, visitors to our offices and our website, and individuals who otherwise wish to communicate with us.

TDR Capital LLP is the controller of the Personal Data. TDR is committed to protecting the privacy of such Personal Data and complying with applicable data protection laws and regulations in respect of use of such Personal Data.

Please read this Privacy Policy carefully. This Privacy Policy was last updated on 31 July 2025.

Contact us

If you have any questions on this Privacy Policy or our use of your Personal Data, please contact us at compliance@tdrcapital.com.

Personal Data we Collect

We collect Personal Data about you directly in the following ways:

When you visit our website, we collect the following basic information about your visit, including your internet service provider’s domain name; IP address; the date, time and duration of your visit; and information about which pages of the website you have viewed.
We also collect data that you provide to us, including by using the email links under the “Contact” and “Our portfolio” sections of this Website, (e.g., name, title, address, email, phone number, date of birth, IP address, financial data, username, password, etc.), when you provide information to use as part of any recruitment process, if you make any form of enquiry or complaints to us, or when you visit one of our offices (which may include information collected via Wi-Fi that you access while on site and CCTV systems operated for the security for visitors and our staff, which may record images of you). You can provide us with personal data via email, post and telephone.
We collect data from public and other third-party sources including from affiliates, partners, recruitment agencies, suppliers, businesses that we invest in (or may invest in) and third-party databases, websites and platforms (e.g., place of work, occupational history, business relationships, background, interests, visual images and photographs and other information required to verify your identity such as passport, ID and proof of address). We also rely on platforms and technologies (including third-party tools) that collect information about you using automated technology.
We also process data in relation to companies that we are evaluating in connection with investments or acquisitions we are evaluating or conducting, either through us or any of our affiliates, and our and their advisors. This personal data may be obtained via third parties (i.e., the business in question or their advisors).

We do not collect any special categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data), other than any special categories of Personal Data that you provided to us as part of any recruitment process, and/or criminal conviction data that we collect as part of standard recruitment background checks. Please do not provide us with any special categories of Personal Data or criminal conviction data unless requested by us.

We do not conduct any automated decision-making or profiling using the Personal Data.

We do not knowingly collect Personal Data on anyone under the age of 16. If you are under the age of 16, please do not provide us with any Personal Data. If we become aware that any such person has provided us with Personal Data, we will delete it.

Personal Data collected through third-party plug-ins and widgets on the website (such as information relating to your use of a social media sharing tool) is collected directly by the providers of the plug-ins and widgets. This information is subject to the privacy policies of the providers of those plug-ins and widgets, and TDR is not responsible for those providers’ data practices.

Please note that we may also collect other information regarding your use of this website or which you provide, which is not Personal Data. That other information is not governed by this Privacy Policy.

How we use your personal data

We only collect Personal Data necessary to carry out our business for the purposes set out below:

Purpose	Legal Basis
To manage, develop, administer and keep a record of your relationship with us and to perform business development activities.	Performance of contract; Compliance with legal obligation; Legitimate interest
Recruitment activities, including identifying prospective candidates and assessing your application for employment by us or our affiliates.	Legitimate interest
To ensure the security of our offices and business premises (and of our staff and visitors).	Compliance with legal obligation; Legitimate interest
To verify your identity, perform background checks, conduct anti-money laundering checks and detect fraud.	Compliance with legal obligation; Legitimate interest
To evaluate potential transactions and conduct due diligence activities in connection with actual or prospective transactions or investments which we or our affiliates are party to.	Legitimate interest
Raising private investment funds.	Legitimate interest
Complying with our obligations under the legal documents which govern private investments with you.	Contractual necessity
Identification and prevention of unlawful activities, including fraud and abuse prevention.	Compliance with legal obligation; Legitimate interest
Obtaining advice from our professional advisors, litigation management and conducting internal audits and investigations.	Compliance with legal obligation; Legitimate interest
Administering and improving this website (including via use of cookies).	Legitimate interest
Administering and protecting our business (including investment products).	Legitimate interest
Promoting and marketing our business to you, including (without limitation): (i) creation of a client relationship management system to record our potential and actual relationship with you; and (ii) any offerings which are similar to those you have invested in or otherwise contracted for previously.	Legitimate interest
Complying with our regulatory and legal obligations, including in relation to the prevention of market abuse and insider dealing where relevant to actual or prospective investments which we or our affiliates are party to (which may include the recording of telephone calls).	Compliance with legal obligation
Compiling statistical data on the use of our website in order to enable us to evaluate and improve our site.	Legitimate interest

The legitimate interests referenced above are our legitimate interests in operating, administering, improving and growing our business.

In certain cases, we may ask for your consent to process your Personal Data (e.g., for limited activities in relation to your relationship with us when raising private investment funds). In such circumstances we will separately seek your consent for those purposes.

Failure to provide Personal Data for the purposes set out above may prevent this website working in an optimum manner and/or prevent us from engaging with you in the requested activity.

Disclosure of Personal Data

Please be aware that the Internet, being an open network, is not secure and consequently Personal Data sent to us via this website or other electronic means may be accessible to third parties by means of the Internet or otherwise. If you choose to send any electronic communications to us by means of this website you do so at your own risk.

We may share your Personal Data in the following ways for the purposes stated above:

With our affiliates, as part of the administration and operation of our and their business (including for internal processing of such Personal Data);
With our professional advisors, for the purpose of our compliance with legal obligations and/or operation of our and our affiliates’ business (including audit, tax, legal, regulation and compliance advice);
With our third-party service providers (including, without limitation, recruitment firms, consultants, telecoms, IT service and software providers (including CRM system and AI tool providers) and data hosting providers), who provide services to us or on our behalf for internal administrative or operational purposes or as necessary to administer our relationship with you or to fulfil the purposes set out in this Privacy Policy. We do not authorise our service providers to use or disclose the information except in the course of providing or performing services for or on our behalf for the purposes set out in this Privacy Policy or otherwise to comply with legal requirements. We seek to ensure that our service providers who are or may be provided with your personal data agree to protect and maintain standards for data security which are to our reasonable satisfaction.
With third parties and their advisors in connection with a sale, merger, acquisition, change of control, joint venture or other business combination or similar transactions or potential transactions involving a member of the TDR group;
With third parties where you have given your consent; and/or
With third parties where we are required to do so by law or where it is necessary for the purpose of, or in connection with legal proceedings, in order to exercise or defend legal rights, to comply with a request from a regulator, governmental agency, court or tribunal, for national security purposes, for the purposes of public importance, or for any other legal or investigatory process involving us.

Where required by applicable law or otherwise in accordance with our business practices, we put in place appropriate contractual provisions with any third party with whom we share your Personal Data, including appropriate confidentiality obligations and, where the third party acts a data processor on our behalf, appropriate data processing provisions.

International Transfers of your Personal Data

Some of the third parties with whom we share your Personal Data may be located and/or have servers located outside your country or the country from which the data is provided (including outside of the UK or European Economic Area). Those countries may not have the same data protection laws as the country in which you initially provided the information. To the extent your Personal Data is transferred to countries outside of the UK or EEA (as applicable), such transfers will only be made in compliance with applicable data privacy laws, which will either rely on adequacy decisions adopted by relevant regulatory and governmental bodies and/or the entry into appropriate contractual clauses. If you have any queries on the safeguards we use for your Personal data, please contact us using the details given in this Privacy Policy.

Retention of Personal Data

We will retain your Personal Data for no longer than reasonably necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law, including statutory or contractual limitation periods.

Security of Personal Data

We maintain administrative, technical and physical safeguards designed to protect your Personal Data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a need to know as set out in this Privacy Policy.

Your rights in relation Personal Data

If we collected Personal Data from your while you are in the UK or the European Economic Area, you have the following rights in relation to that Personal Data:

Access: You have the right to ask for a copy of the Personal Data that we hold about you free of charge. However we may charge a ‘reasonable fee’, if we think that your request is excessive or unfounded, to help us cover the costs of locating the information you have requested. We may also be able to ask you to refine your response or extend the time to respond to your request depending on the scope of that request.
Correction: You may notify us of changes to your Personal Data if it is inaccurate or it needs to be updated.
Deletion: If you think that we shouldn’t be holding or processing your Personal Data any more, you may request that we delete it. Please note that this may not always be possible due to legal obligations or legal claims.
Restrictions on use: You may request that we stop processing your Personal Data (other than storing it), if: (i) you contest the accuracy of the relevant Personal Data (until the accuracy is verified); (ii) you believe the processing of such Personal Data is against the law; (iii) you believe that we no longer need your Personal Data for the purposes for which it was collected, but you still need your Personal Data to establish or defend a legal claim; or (iv) you object to the processing, and we are verifying whether our legitimate grounds to process your Personal Data, override your own rights. We may still be able to continue processing your Personal Data in limited circumstances.
Object: You have the right to object to our processing your Personal Data, including: (i) for direct marketing; (ii) for research or statistical purposes; or (iii) where processing is based on legitimate interests. This is not an absolute right and we may still be able to continue processing in certain circumstances.
Portability: If you wish to transfer your Personal Data to another organisation (and certain conditions are satisfied), you may ask us to do so, and we will send it directly if we have the technical means. We may not be able to comply with this request if the portability would negatively impact the rights of other individuals.
Withdrawal of consent: If you previously gave us your consent (by a clear affirmative action) to allow us to process your Personal Data for a particular purpose, but you no longer wish to consent to us doing so, you can contact us to let us know that you withdraw that consent.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that your Personal Data is not disclosed to any person who is not authorized by you to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. Failure to provide this additional information may prevent us from responding to your request and/or delay the exercise of your rights.

To exercise these rights, please contact us using the details given in this Privacy Policy.

Complaints

If you are unhappy with how we have processed or are processing your Personal Data, we would be grateful for the chance to first hear your concerns. Please contact us using the contact details set out below in this Privacy Policy.

However, you also have the right to lodge a complaint about our use of your Personal Data with the relevant supervisory authority.

In the UK, this is the Information Commissioner’s Office – https://ico.org.uk/global/contact-us.

Notification of changes

We reserve the right to amend this Privacy Policy from time to time by updating this Privacy Policy. If we decide to change our Privacy Policy, we will update it on this website

Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. When you visit our website, we may collect Personal Data from you automatically through cookies or similar technology.

We use cookies in a range of ways to improve and enhance your experience on our website, including keeping you signed in and understanding how you use our website.

There are different types of cookies. Our website uses the following types:

Strictly Necessary – these cookies are necessary for our website to function and cannot be switched off (including Solid Security for security purposes). These cookies do not store any personal data. You may adjust your browser settings to block such cookies however some parts of our website may not work.
Functionality – if accepted, we use these cookies so that we recognise you on our website and remember your previously-selected preferences, for example, what language you prefer and your location. We use a mixture of first-party and third-party cookies. If you do not allow such cookies some parts of our website may not work.
Analytics – if you accept our use of such cookies, we use these cookies (including Google Analytics 4) to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. We collect information including the number of visitors to the website, where visitors have come to the website from and the pages they visited.

If you wish to manage your use of cookies, you can set your browser not to accept cookies, and the link above sets out how to remove cookies from your browser. However, we note that removing cookies may impact the functionality of some features on our website and impact your experience of our website generally.