Legal
Privacy Policy
Effective 30 October 2026
This policy explains how Causeway ("Causeway", "we", "us") collects and uses personal information when you visit causeway-dc.com or contact us. It is written to meet the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and applicable US privacy laws, including the California Online Privacy Protection Act (CalOPPA).
Who we are
Causeway is a government relations, strategic advisory and communications firm operating in the United States and the United Kingdom. Causeway is the controller of the personal information described in this policy. You can reach us about any privacy matter through our contact form by choosing "Privacy request" as the topic.
What we collect
Information you give us
When you submit our contact form, we collect your name, work email address, organization, role, the areas you are interested in and the contents of your message.
Information collected automatically
Our website is hosted by Squarespace. When you visit, Squarespace collects technical information such as your IP address, browser type, device type, referring page and the pages you view. Where you consent, Squarespace also sets analytics cookies that help us understand how the site is used. Strictly necessary cookies are used to keep the site secure and working.
We do not knowingly collect special category data, and we ask that you do not include it in messages to us.
How we use it, and the legal basis for each use
| Purpose | Legal basis under UK and EU GDPR |
|---|---|
| Responding to your enquiry and discussing a potential engagement | Our legitimate interests in responding to business enquiries, or steps taken at your request before entering into a contract |
| Screening potential engagements for conflicts and lobbying compliance | Compliance with legal obligations, including the US Lobbying Disclosure Act |
| Keeping the website secure and working | Our legitimate interests in operating a secure website |
| Understanding how the website is used (analytics cookies) | Your consent, which you can withdraw at any time through the cookie banner |
We do not use your information for automated decision-making or profiling, and we do not send marketing emails from this website.
Who we share it with
We share personal information only with service providers who process it on our behalf, under contracts that require them to protect it:
- Squarespace, which hosts our website and contact form
- Our email and document storage providers, which hold correspondence
We may also disclose information where required by law, or to protect our rights. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
International transfers
Causeway and its service providers operate in the United States, so information you send us from the UK or the European Economic Area will be transferred to and stored in the US. Where we do this, we rely on appropriate safeguards, such as the EU-US Data Privacy Framework and its UK Extension where a provider is certified, or standard contractual clauses and the UK International Data Transfer Addendum.
How long we keep it
We keep enquiries for up to two years after our last contact with you, unless they lead to an engagement. Information related to an engagement is kept for as long as needed to meet our legal, regulatory and record-keeping obligations, including lobbying disclosure requirements. Analytics data is retained according to Squarespace's standard settings.
Your rights in the UK and EU
Subject to certain conditions, you have the right to:
- access the personal information we hold about you
- have inaccurate information corrected
- have your information deleted
- restrict or object to our processing, including processing based on legitimate interests
- receive your information in a portable format
- withdraw your consent at any time, where we rely on consent
You also have the right to complain to a supervisory authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EU, it is the data protection authority where you live or work. We would welcome the chance to resolve your concern first.
Your rights in the United States
Depending on where you live, US state privacy laws may give you the right to know what personal information we hold about you, to access, correct or delete it, and to opt out of its sale, targeted advertising or profiling. We do not sell personal information or use it for targeted advertising, but we will honor requests to access, correct or delete your information wherever you live, and we will not discriminate against you for making one.
California residents: in line with CalOPPA, you can review and request changes to the personal information you have submitted to us through our contact form.
Do Not Track and Global Privacy Control
Some browsers send "Do Not Track" signals. There is no common standard for responding to them, so our website does not change its behavior when it receives one. Where required by law, we treat a Global Privacy Control signal as a request to opt out of the sale or sharing of personal information. Our cookie banner lets you decline analytics cookies at any time.
Children
Our website and services are intended for businesses and professionals. They are not directed at children under 16, and we do not knowingly collect their personal information.
Security
We use appropriate technical and organizational measures to protect personal information, including encrypted connections to this website and access controls on our systems. No method of transmission or storage is completely secure.
Third-party links
Our website links to other sites, such as our Substack and social media profiles. Their privacy practices are governed by their own policies.
Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it was last changed.
Contact
To exercise your rights or ask a question about this policy, use our contact form and choose "Privacy request". We will respond within one month, or sooner where the law requires.