This website is operated by Costello Advisory, a trading name of the individual identified below.

What Costello Advisory is. Costello Advisory is a consultancy. It is not a law firm and is not authorised or regulated by any legal services regulator.

Regulated legal advice. Where an engagement involves regulated legal advice, that advice is given by Ash Costello through a regulated law firm, under that firm’s engagement terms, complaints procedure and professional indemnity insurance. The firm is identified to you in writing before the engagement begins.

No advice and no client relationship through this website. Nothing on this website is legal advice. Using the website, reading an article or sending an enquiry does not create a solicitor–client or attorney–client relationship. A client relationship begins only when engagement terms are agreed in writing.

Attorney advertising. Parts of this website may be considered attorney advertising in some jurisdictions. Prior results do not guarantee a similar outcome.

Privacy notice

This notice explains how personal data is handled when you visit this website or contact Costello Advisory. It is given under the UK GDPR and, where it applies, Regulation (EU) 2016/679 (GDPR).

1. Controller. The controller is A. Costello, trading as Costello Advisory (details in the legal notice above). Privacy requests: ash@costello-advisory.com. No data protection officer has been appointed, as none is required.

2. What is processed, why, and for how long.

Enquiries and correspondence (your name, organisation, email address and the content of your message). The enquiry form on this website does not send or store anything: it opens a pre-filled message in your own email program, and you choose whether to send it. If you email, the data is used to reply and, where relevant, to take steps at your request before a contract. Legal basis: Article 6(1)(b) and Article 6(1)(f) of the UK GDPR and GDPR (legitimate interest in answering enquiries). Enquiries that do not lead to an engagement are kept for up to 24 months after the last contact.

Technical data (IP address and browser data in server logs). This is processed by the hosting and network providers to deliver and secure the website. Legal basis: Article 6(1)(f). It is kept by those providers for short periods under their own policies.

Client matters. Personal data handled in the course of an engagement is governed by the engagement terms and privacy information provided at that stage.

3. Who receives your data. Service providers acting on the controller’s behalf or as independent controllers: website hosting (Netlify), DNS and network services (Cloudflare) and email (Microsoft 365). Data may be shared with a regulated law firm where you ask for legal advice, with professional advisers, and with public authorities where the law requires. Personal data is not sold.

4. Transfers outside the UK and the EEA. Some of these providers are based in, or process data in, the United States or other countries outside the UK and the EEA. Transfers rely on the UK extension to the EU–US Data Privacy Framework (or the Framework itself) where the provider is certified, and otherwise on standard contractual clauses with the UK addendum where required.

5. Your rights. You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To exercise these rights, email the address above. You may also complain to the UK Information Commissioner’s Office (ico.org.uk) or, if you are in the EEA, to the data protection authority of your own country.

6. Other information. You are not obliged to provide any data, but an enquiry cannot be answered without contact details. There is no automated decision-making or profiling.

Cookie statement

This website does not use analytics, advertising or profiling cookies, and it does not embed third-party content. Fonts are served from this website itself, not from a third party.

The hosting and network providers (Netlify, Cloudflare) may set strictly necessary technical cookies for security and performance. These do not require consent.

If analytics or any non-essential cookies are introduced in future, consent will be requested first and this statement will be updated.

Terms of use

1. Information only. The content of this website, including all articles, is general information. It is not legal advice and should not be relied on as such. You should take advice on your own circumstances before acting.

2. Currency. Each article states the law as at its publication date. Articles are not updated after publication unless they say so. Law and regulatory guidance change frequently.

3. No client relationship. Use of this website does not create a professional relationship of any kind (see the legal notice above). Please do not send confidential information until engagement terms have been agreed.

4. Intellectual property. The content of this website is © Ash Costello. You may quote short extracts with attribution and a link to the source. Any other reproduction needs written permission.

5. Links. Links to third-party websites are provided for convenience. Costello Advisory is not responsible for their content.

6. Liability. To the extent permitted by law, no liability is accepted for loss arising from reliance on the content of this website. Nothing in these terms excludes or limits any liability that cannot be excluded or limited by law.

7. Governing law. These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction. If you are a consumer, this does not affect any mandatory rights you have under the law of the country where you live.

8. Changes and contact. These terms may be updated; the date at the top of this page shows the latest version. Questions: ash@costello-advisory.com.