Last updated: August 2026

​

R2B, trading as Regulatory Enforcement Practice, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share personal data when you use this website, join as a member, subscribe to news and updates, or contact us.

​

Please read this Privacy Policy alongside our Cookies Policy.

​

1. Who we are

​

Regulatory Enforcement Practice operates, trading as R2B. We are the controller of the personal data described in this Privacy Policy.

You can contact us at admin@r2b.uk.

​

2. Information we collect

​

We may collect the following personal data:

• Your name and email address when you create a member account, subscribe to our news and updates, or contact us.

• Account information connected with your membership, such as your membership preferences and account settings.

• Information you provide when you contact us, send feedback or make an enquiry.

• Technical and usage information when you visit the website, including your IP address, browser and device information, approximate location, pages visited, links clicked, time spent on pages, referral source and cookie preferences.

We do not currently sell products or accept payments through this website.

​

3. How we collect information

​

We collect personal data when:

• You complete a website form, including a membership-registration, contact or newsletter form.

• You use member-only content.

• You subscribe to news and updates.

• You browse our website, where cookies and similar technologies operate in accordance with your cookie preferences.

​

4. How we use information

​

We use personal data to:

• Create and administer member accounts and provide access to member-only articles and resources.

• Send news, updates and other email communications that you have chosen to receive.

• Respond to enquiries, feedback and other communications.

• Operate, maintain, protect and improve the website and its content.

• Understand how visitors use the website, where you have consented to analytics cookies.

• Comply with legal obligations and establish, exercise or defend legal claims where necessary.

​

5. Legal bases

​

We rely on the following lawful bases under UK data-protection law:

• Contract: where processing is necessary to provide the membership access or website functionality you have requested.

• Consent: for email news and updates where you choose to subscribe, and for non-essential cookies and analytics technologies. You may withdraw consent at any time.

• Legitimate interests: where necessary to operate, secure and improve our website, prevent misuse and protect our rights. We balance these interests against your rights and freedoms.

• Legal obligation: where processing is necessary to meet a legal requirement.

​

6. Sharing information

​

We use service providers to operate the website and communications. These include:

• Wix, which provides website hosting, membership functionality and email-marketing services.

• Google, including Google Analytics and Google Tag Manager, where you have accepted analytics cookies.

• Microsoft, for business email, document storage and related administration.

 

These organisations may process personal data on our behalf or, depending on the service, as independent controllers. We do not sell your personal data.

​

We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.

​

7. International transfers

​

Some of our service providers may process personal data outside the UK. Where this involves a restricted transfer, we will ensure an appropriate safeguard is in place under UK data-protection law. This may include an adequacy regulation, the UK International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses.

​

8. How long we keep information

​

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

​

In normal circumstances:

• Newsletter subscriber information is retained until you unsubscribe. We review inactive subscribers periodically and may remove them after 24 months of no engagement.

• Member-account information is retained while the account is active and normally deleted or anonymised within 12 months of closure or inactivity.

• Enquiry and contact-form information is normally retained for 12 months after our last substantive contact.

• Technical and security logs are normally retained for up to 12 months.

• Backup copies are normally overwritten within 90 days.

​

We may retain information for longer where necessary to comply with a legal obligation, resolve a dispute, prevent fraud or establish, exercise or defend legal claims. The ICO advises organisations to set and document retention periods that reflect the business purpose and legal requirements.

​

9. Cookies and analytics

​

We use essential cookies required for website operation, security and membership functionality.

​

We also use non-essential analytics technologies, including Google Analytics, Google Tag Manager and Wix Analytics, to understand website use and improve our content. We use these non-essential technologies only where you have given consent through our cookie banner.

You can accept, reject or change your cookie preferences at any time through the Privacy Settings link at the bottom of the website. Embedded YouTube videos may set cookies or collect information when you play or interact with them. Further details are available in our Cookies Policy. The ICO distinguishes essential cookies from analytics and similar non-essential cookies, which require appropriate consent.

​

10. Your rights

​

Depending on the circumstances, you have the right to:

• Request access to the personal data we hold about you.

• Request correction of inaccurate or incomplete personal data.

• Request deletion of personal data.

• Request restriction of processing.

• Object to processing based on legitimate interests, including direct marketing.

• Request transfer of personal data to you or another organisation, where applicable.

• Withdraw consent at any time where we rely on consent.

​

You can unsubscribe from news and updates using the link in any email we send, or by contacting us at admin@r2b.uk.

We may need to verify your identity before responding to a request.

If you have concerns about how we use personal data, please contact us first. You also have the right to complain to the Information Commissioner’s Office at www.ico.org.uk.

​

11. Automated decision-making

​

We do not make decisions about you solely by automated means that have legal or similarly significant effects.

​

12. Security

​

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

​

13. Other websites

​

This website may include links to third-party websites or services. We are not responsible for their privacy practices or content. Please read their privacy policies before providing personal data.

​

14. Changes to this policy

​

We may update this Privacy Policy from time to time. Any changes will be published on this page and the “Last updated” date will be changed.

​

15. Contact

​

For questions, concerns or requests relating to personal data, contact: trading as R2B / Regulatory Enforcement Practice
Email: admin@r2b.uk