This privacy notice tells you what to expect us to do with your personal information.
Contact Details
What information we collect, use, and why
We collect or use the following information to provide our consultancy services:
- Names and contact details
- Addresses
- Account and onboarding information
- Financial transaction information
We collect or use the following information for website optimisation and analytics:
- Website user information, including user journeys and cookie tracking via GA4/GTM
We collect or use the following information to comply with legal and tax requirements:
- Name and contact information
- Financial transaction records
We collect or use the following personal information for dealing with queries, complaints or claims:
- Names, contact details, and correspondence history
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. We rely on the following bases depending on the activity:
- Consent: We rely on your explicit permission for website analytics and cookie tracking (GA4). You grant this via our Civic Cookie Control banner and have the right to withdraw it at any time.
- Contract: We rely on this basis when processing your information to deliver our consultancy services or fulfill an agreement with you.
- Legal obligation: We rely on this basis to comply with the law, such as keeping financial records for UK tax purposes (HMRC).
Your Data Protection Rights
You have the following rights under UK data protection law:
- Your right of access – You can ask for copies of your personal information.
- Your right to rectification – You can ask us to correct inaccurate information.
- Your right to erasure – You can ask us to delete your personal information in certain circumstances.
- Your right to restriction/objection – You can ask us to limit or object to how we use your data.
- Your right to data portability – You can ask us to transfer your data to another organisation.
If you make a request, we must respond to you within one month. Please contact us at [email protected] to exercise these rights.
Where we get personal information from
- Directly from you (e.g., via contact forms, emails, or phone calls).
- Indirectly via automated technologies (e.g., cookies set by Google Analytics 4).
Cookies and Tracking Technologies
We use cookies and similar storage technologies on our website to ensure its technical functionality and to gather analytics data.
- Strictly Necessary Cookies: These are required for the website to function safely and cannot be switched off (such as the cookie that remembers your privacy choices).
- Analytics Cookies (Google Analytics 4 / Google Tag Manager): With your permission, we use these to collect information about how visitors use our site (e.g., page views, journey maps, and device types). This helps us improve our consultancy services.
How to manage your preferences: We use the Civic Cookie Control banner to manage your cookie consent. Non-essential analytics cookies will never be set unless you explicitly click “Accept”. You can change your mind, review your settings, or withdraw your consent at any time by clicking the cookies link located in the footer of our website. Alternatively, you can clear or block cookies directly via your web browser settings.
How long we keep information
We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Specifically, we apply the following retention periods:
- Website Analytics Data (GA4): Technical data, online identifiers, and event data collected via Google Analytics 4 are automatically retained for a period of 14 months from your last visit, after which it is automatically deleted by Google.
- Business & Client Enquiries: If you contact us regarding our consultancy services, we retain your details for up to 2 years following our last interaction, unless you become a client.
- Contractual & Financial Data: If you become a client, standard business and financial records are retained for 6 years following the end of the financial year in which the contract concluded, to comply with UK tax laws (HMRC).
Sharing information outside the UK
Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.
- Organisation name: Google LLC
- Category of recipient: Google Analytics 4 / Google Tag Manager
- Country sent to: United States
- How the transfer complies with law: Google is certified under the UK Extension to the EU-U.S. Data Privacy Framework (and utilises the Addendum to the EU Standard Contractual Clauses as a backup safeguard).
How to complain
If you have any concerns about our use of your personal information, you can make a data protection complaint directly to us at [email protected].
If you remain unhappy with how we’ve used your data, you can complain to the Information Commissioner’s Office (ICO):