Glyn Hughes Consulting Ltd is committed to protecting your personal data.
1. Who we are
Glyn Hughes Consulting Ltd ("we", "us", "our") is the data controller responsible for the personal data collected through this website.
- Company name: Glyn Hughes Consulting Ltd
- Registered in: England and Wales
- Company number: 11939622
- Registered office: 1 Dunnock Close, Stockport, Cheshire, SK2 5XD, United Kingdom
- Email: info@glynhughesconsulting.co.uk
- Telephone: 07305883679
- ICO registration number: ZB726002
If you have any questions about this policy or about how we handle your personal data, contact us using the details above.
2. What this policy covers
This policy explains what personal data we collect through glynhughesconsulting.co.uk, why we collect it, what we do with it, how long we keep it and what rights you have. It applies to visitors to this website and to people who contact us about our services.
It does not cover personal data we process in the course of delivering consultancy services to a client. Where that applies, the arrangements are set out in the relevant engagement contract.
3. The personal data we collect
Information you give us
When you complete the enquiry form on this site, or email or call us, we collect:
- Your name
- Your email address
- Any other information you choose to include in your message, which may include your telephone number, your organisation and details of your project
Information collected automatically
When you visit this site, our hosting provider and security infrastructure automatically process technical data including your IP address, browser type and version, device type, operating system, the pages you view and the date and time of your visit. This is generated as a normal part of delivering the website and keeping it secure.
We do not collect special category data through this website, and we ask that you do not include sensitive personal information in enquiry messages.
4. Why we use your personal data, and our lawful basis
| What we use it for | Lawful basis |
|---|---|
| Responding to your enquiry and discussing your project | Legitimate interests: dealing with enquiries about our services |
| Taking steps to agree an engagement with you | Performance of a contract, or steps taken at your request before entering into one |
| Keeping a record of correspondence, including for professional and insurance purposes | Legitimate interests: managing our business and defending potential claims |
| Protecting the website against spam, abuse and security threats | Legitimate interests: keeping our systems secure |
| Complying with our legal and regulatory obligations | Legal obligation |
| Sending you marketing communications, if you have asked to receive them | Consent |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded that they are not, because the processing is what you would reasonably expect when contacting a consultancy about its services.
We do not use your personal data for automated decision making or profiling.
5. Marketing
We do not add enquirers to a marketing list automatically. If we ever send marketing communications, we will only do so where you have asked us to, or where the law otherwise permits it, and every message will include a way to unsubscribe. You can ask us to stop at any time by emailing info@glynhughesconsulting.co.uk.
6. Cookies and analytics
This website uses only cookies that are strictly necessary for it to function and to remain secure. These do not require your consent and are not used to track you across other websites. We do not use advertising or analytics cookies.
7. Who we share your personal data with
We do not sell your personal data and we do not share it for anyone else's marketing purposes.
We share it only with organisations that help us run this site and our business, each of which acts as our processor under a written contract, or with organisations we are legally required to deal with. These include:
- Our website hosting and application platform provider
- Our database and form storage provider
- Our email delivery provider
- Our email and productivity provider
- Our professional advisers, including accountants, insurers and legal advisers, where relevant
- Regulators, law enforcement or other authorities, where we are required to disclose information
8. International transfers
Some of our suppliers process personal data outside the United Kingdom. Where that happens, we make sure the transfer is protected by an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of the safeguards that apply.
9. How long we keep your personal data
| Type of data | Retention period |
|---|---|
| Enquiries that do not lead to an engagement | Up to 24 months from our last contact with you, then deleted |
| Correspondence relating to an engagement | For the duration of the engagement and for 6 years afterwards, reflecting the limitation period for contractual claims |
| Records we must keep by law, such as accounting records | 6 years from the end of the relevant accounting period |
| Marketing consents | Until you withdraw consent, plus a record of the withdrawal itself |
| Website technical logs | As generated by our providers, typically no more than 12 months |
10. How we keep your personal data secure
We use suppliers who provide encryption in transit and at rest, we restrict access to personal data to those who need it, and we use multi-factor authentication on the accounts used to access enquiry data. No transmission over the internet can be guaranteed as completely secure, but we take appropriate technical and organisational measures to protect your information.
11. Your rights
Under UK data protection law you have the right to:
- Be informed about how we use your personal data, which is the purpose of this policy
- Access a copy of the personal data we hold about you
- Rectification of personal data that is inaccurate or incomplete
- Erasure of your personal data in certain circumstances
- Restrict our processing of your personal data in certain circumstances
- Object to processing carried out on the basis of legitimate interests, and to object to direct marketing at any time
- Data portability in certain circumstances
- Withdraw consent at any time, where we rely on consent
To exercise any of these rights, email info@glynhughesconsulting.co.uk. We will respond within one month. There is normally no charge. We may ask you for information to confirm your identity before we act on a request.
12. Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we have the chance to put it right. You also have the right to complain to the Information Commissioner's Office at any time.
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
13. Links to other websites
This site may link to other websites. We are not responsible for the content or privacy practices of those sites, and we encourage you to read their own privacy policies.
14. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised. Where changes are significant, we will make that clear on this page.