We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This statement outlines how we uphold your rights and handle personal information responsibly.
We act as the data controller for personal information collected through our consultancy services. Our registered address is 47 New Walk, Leicester, LE1 7EA, United Kingdom. For data protection enquiries, contact [email protected].
We process personal data under the following lawful bases:
You have the following rights regarding your personal data:
You may request a copy of all personal data we hold about you. We will provide this information within one month of your request, in a commonly used electronic format.
If you believe any personal data we hold is inaccurate or incomplete, you may request corrections. We will update records promptly upon verification.
You may request deletion of your personal data in certain circumstances, including when data is no longer necessary for the purposes it was collected, or if you withdraw consent. Some data may be retained where we have legal obligations to do so.
You may request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of data or object to processing.
Where technically feasible, you may request that we transfer your personal data to another service provider in a structured, machine-readable format.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
We retain personal data for as long as necessary to fulfil the purposes for which it was collected. Client consultation records are typically retained for seven years following the conclusion of our professional relationship, in accordance with financial record-keeping obligations.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure server infrastructure, and regular security assessments.
In the event of a data breach likely to result in risk to your rights and freedoms, we will notify you within seventy-two hours of becoming aware of the breach. Notification will include the nature of the breach, likely consequences, and measures taken to address it.
Any third-party service providers we engage to process personal data on our behalf are bound by contractual obligations to implement appropriate security measures and process data only as instructed.
We do not routinely transfer personal data outside the United Kingdom. If circumstances require international transfer, we ensure compliance with GDPR requirements, including use of Standard Contractual Clauses or other approved transfer mechanisms.
To exercise any of your GDPR rights, submit a written request to [email protected]. We may request identification verification before processing requests. There is no fee for most requests, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
Last updated: September 2026