Habro
Bespoke GDPR gap analysis and implementation support for a boutique property investment and advisory firm
Strongest proof
GDPR gap analysis through to implementation
- Sector
- Financial Services · Professional Services / Engineering
- Capability
- Data Privacy & DPO
- Geography
- London, United Kingdom
- Engagement model
- Defined-scope assurance
- Evidence
- Named client · Public evidence
At a glance
- Who
- Habro · Financial Services · Professional Services / Engineering
- Why it mattered
- A small, investor-facing property business needed a bespoke route to thorough GDPR practice.
- IG-Smart's role
- GDPR gap analysis, compliance report and implementation support
01The exposure
Habro is a boutique commercial, mixed-use and multi-let property advisory company based in London, investing in the UK for over 25 years and supported by an institutional fund-management platform operated from its Copenhagen head office. IG-Smart, named GDPR Consultancy of the Year in 2020 and 2021, was engaged to support it.
Handling investor and tenant information across a diversified portfolio, Habro needed to understand its GDPR strengths and weaknesses and put robust policies and procedures in place — without a large in-house compliance function.
02The mandate
A proportionate, bespoke gap analysis with clear recommendations and practical support to implement them.
Commissioned scope
- GDPR gap analysis
- Full GDPR Compliance Report
- Improvement Plan
- Implementation support for recommended policies and procedures
- Ongoing clarification of recommendations
03Environment
Organisation context
Describes the client organisation — not the size of IG-Smart's work.
- Boutique London property advisory firm with a Copenhagen-based fund-management platform
Frameworks in scope
- UK GDPR
- Data Protection Act 2018
Scope boundary
- Organisation-context figures describe Habro's group platform, not the scope of the engagement.
- Engagement dates are not stated.
04IG-Smart's approach
- 01
Assess
Ran informative working sessions to understand the business and assess its GDPR position.
- 02
Build
Produced a full GDPR Compliance Report and Improvement Plan identifying strengths and weaknesses.
- 03
Improve
Worked closely with Habro to implement recommendations and create robust policies and procedures, remaining available for queries.
Engagement phases: Assess · Build · Improve
05Engagement scale
What IG-Smart's work covered
- GDPR Compliance Report and Improvement Plan
- Implementation support
06What we delivered
- GDPR Compliance Report
- Improvement Plan
- Policies and procedures developed during implementation
07Outcome
Client-reported result
Habro reported the gap analysis gave much-needed insight into its GDPR strengths and weaknesses and allowed it to create robust policies and procedures, with the documents remaining an invaluable resource.
08Client perspective
“I would not hesitate in recommending the services that IG Smart provides. The meetings we had with Michael were informative and he really helped to guide our company through the process of identifying and implementing thorough GDPR practices. We are a small business and therefore required a bespoke approach, which I feel IG Smart provided to the highest level. The gap analysis provided a much needed insight into our strengths and weaknesses where GDPR is concerned and allowed us as a company to troubleshoot and create iron clad policies and procedures. Both Michael and Claire always made themselves available should we have any queries, or if we required clarification on some of the recommendations which had been made. The gap analysis and associated documents will continue to be an invaluable resource for our business.”
09What this demonstrates
Relevant to property, investment, fund-management and other professional-services firms needing proportionate GDPR assessment and implementation support.
10What buyers can verify
Public
- Named client
- Engagement scope
- Named client quotation
- Deliverable types described
Further evidence can be discussed subject to confidentiality and client permissions.
Related services
Related evidence
Retail / Consumer, Data Privacy & DPO · Information Governance
Iconex
GDPR gap analysis and improvement planning for a global retail and FMCG supply-chain provider
An established supplier to major consumer brands needed to assess its data-protection arrangements against the GDPR.
The client reported a clear understanding of its achievements to date and an improvement plan.
Read the case studySupply Chain / Logistics, Data Privacy & DPO · Information Governance
EFS - Ebrex / Ebrex (UK) Ltd
GDPR gap analysis and improvement planning for an international logistics business
An international logistics business needed to understand its GDPR position and prioritise its next steps.
Read the case studySecurity Services & Technology, Data Privacy & DPO · Information Governance
Banham Group
From GDPR improvement programme to long-term outsourced DPO partnership
GDPR improvement programme and retained outsourced DPO for Banham Group.
Client: “He is always available and responsive.”
Read the case study
Facing a comparable requirement?
This case reference is passed to the form so you don't need to re-enter it.
Submit a Requirement