Privacy & Cookies Policy

1. Introduction

Prospect Business Sales Ltd trading as GTP Practice Sales (“GTP Practice Sales”, “we”, “us”, or “our”) is registered in England and Wales under company number 05110087 with its registered office at:

2 Victoria Avenue
Harrogate
HG1 1EL
United Kingdom

We are an acquisition consultancy firm specialising in the buying, selling, valuation, and acquisition of healthcare and medical sector businesses across the United Kingdom, the United States, and Canada.

This Privacy & Cookies Policy explains how we collect, use, store, share, and protect personal information when you:

• visit our website,
• contact us,
• enquire about our services,
• submit information relating to a business acquisition or valuation,
• or otherwise interact with us.

We are committed to protecting your privacy and handling your personal information transparently and securely in accordance with applicable privacy and data protection laws, including:

• the UK General Data Protection Regulation (“UK GDPR”),
• the Data Protection Act 2018,
• applicable US state privacy laws including the California Consumer Privacy Act (“CCPA/CPRA”),
• and Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), where applicable.

 

2. Data Controller

For the purposes of applicable data protection legislation, the data controller is:

Prospect Business Sales Ltd
Email: [email protected]

We are registered with the UK Information Commissioner’s Office (ICO) under registration number Z152730X.

 

3. Information We Collect

We may collect the following categories of information:

Personal Information

Including:

• name,
• email address,
• telephone number,
• postal address,
• company information,
• professional details,
• financial or transactional information voluntarily provided by you,
• communications with us.

Technical Information

Including:

• IP address,
• browser type,
• operating system,
• device identifiers,
• website usage data,
• pages visited,
• referral sources,
• cookie identifiers.

Business Information

Where relevant to our services, we may collect information relating to:

• business acquisitions,
• valuations,
• practice sales,
• financial performance,
• ownership structures,
• and transaction requirements.

Special Category Data

In limited circumstances, we may process special category data where:

• you voluntarily provide it,
• and it is necessary for the provision of our services or compliance obligations.

Where required by law, we will obtain your explicit consent before processing such information.

 

4. How We Collect Information

We may collect information:

• directly from you,
• through forms completed on our website,
• via email, telephone, or meetings,
• through acquisition or valuation enquiries,
• through website analytics and cookies,
• from publicly available sources,
• and from third-party service providers where legally permitted.

 

5. How We Use Your Information

We may use your information to:

• provide acquisition consultancy services,
• facilitate the buying or selling of healthcare businesses,
• evaluate acquisition opportunities,
• provide valuations and advisory services,
• communicate with you regarding enquiries or transactions,
• send acquisition alerts or service updates,
• improve our website and services,
• comply with legal and regulatory obligations,
• maintain security and prevent fraud,
• analyse website performance and user engagement,
• and protect our legitimate business interests.

 

6. Legal Basis for Processing

Depending on the circumstances, we process personal information on the following legal bases:

• performance of a contract,
• legitimate business interests,
• compliance with legal obligations,
• consent,
• and protection of legal rights.

Where consent is relied upon, you may withdraw your consent at any time.

 

7. Marketing Communications

We may contact you regarding:

• acquisition opportunities,
• business listings,
• industry insights,
• and related consultancy services.

Where required by law, we will obtain your consent before sending marketing communications.

You may unsubscribe or update your communication preferences at any time by:

• clicking the unsubscribe link in emails,
• contacting us directly,
• or updating your preferences where available.

 

8. Disclosure of Information

We may share personal information with:

• professional advisers,
• legal and financial consultants,
• IT and hosting providers,
• analytics providers,
• regulatory authorities,
• law enforcement agencies,
• and service providers supporting our business operations.

We do not sell personal information to third parties.

We do not share personal information with third parties for their own direct marketing purposes.

 

9. International Transfers

As we operate internationally, your information may be transferred to and processed in countries outside your jurisdiction, including the United States and Canada.

Where required, we implement appropriate safeguards to protect personal information, including:

• contractual protections,
• data transfer agreements,
• Standard Contractual Clauses,
• and equivalent legal mechanisms.

 

10. Data Retention

We retain personal information only for as long as necessary to:

• provide our services,
• comply with legal and regulatory obligations,
• resolve disputes,
• enforce agreements,
• and protect our legitimate business interests.

Retention periods may vary depending on the nature of the information and applicable legal requirements.

 

11. Security

We use appropriate technical and organisational security measures designed to protect personal information against:

• unauthorised access,
• disclosure,
• misuse,
• alteration,
• and loss.

However, no method of internet transmission or electronic storage can be guaranteed as completely secure.

 

12. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

• access to your personal information,
• correction of inaccurate information,
• deletion of information,
• restriction of processing,
• objection to processing,
• withdrawal of consent,
• data portability,
• and the right to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us using the details provided below.

 

13. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including:

• the right to know what personal information we collect,
• the right to request deletion,
• the right to correct inaccurate information,
• the right to opt out of the sale or sharing of personal information,
• and the right not to be discriminated against for exercising your rights.

We do not sell personal information as defined under the CCPA.

California residents may submit requests by contacting us using the details below.

14. Canadian Privacy Rights

Where applicable under Canadian privacy laws, including PIPEDA, individuals may request access to or correction of their personal information and may withdraw consent for certain processing activities, subject to legal or contractual restrictions.

 

15. Children’s Privacy

Our services and website are not directed toward individuals under the age of 18.

We do not knowingly collect personal information from children under 13 years of age. If we become aware that such information has been collected, we will take appropriate steps to delete it.

 

16. Cookies

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, improve user experience, and provide analytical information.

 

How We Use Cookies

We may use cookies and similar technologies to:

• operate and secure our website,
• remember preferences,
• analyse website traffic and performance,
• improve functionality,
• and support marketing and advertising activities.

Types of Cookies We Use

Strictly Necessary Cookies

Required for the operation and security of the website.

Analytics Cookies

Help us understand website usage and improve performance.

Functionality Cookies

Remember user preferences and settings.

Advertising and Personalisation Cookies

Used to deliver relevant advertising and measure campaign effectiveness.

Analytics Services

We may use analytics providers such as Google Analytics 4 (GA4) to understand how visitors use our website.

Analytics providers may collect information such as:

• IP address,
• browser information,
• device information,
• and interaction data.

You can learn more about Google’s privacy practices here:

Google Privacy Policy

 

Cookie Consent

Where required by law, we will request your consent before placing non-essential cookies on your device.

You may manage or withdraw cookie preferences at any time through:

• our cookie banner or preference centre,
• or your browser settings.

 

17. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external sites.

We encourage you to review the privacy policies of any third-party websites you visit.

 

18. Changes to This Policy

We may update this Privacy & Cookies Policy from time to time.

Any updates will be posted on this page together with the revised effective date.

19. Contact Us

If you have questions about this Privacy & Cookies Policy or wish to exercise your privacy rights, please contact:

Prospect Business Sales Ltd
Email: [email protected]

You also have the right to lodge a complaint with:

• the UK Information Commissioner’s Office (ICO),
• your local supervisory authority,
• or the Office of the Privacy Commissioner of Canada, where applicable.

Last Updated: 20 May 2026