GDPR statement

Our approach to GDPR compliance.

We handle personal data in line with UK GDPR and the Data Protection Act 2018.

Data protection contact

Email: [email protected]

We will coordinate any request with the relevant engagement lead.

Legal basis for processing

We process data under the lawful bases most relevant to our consulting work.

Contractual necessity

To deliver consulting services and respond to requests for proposals.

Legitimate interests

To manage our business, improve services, and ensure operational security.

Legal obligations

To comply with regulatory requirements and record keeping duties.

Your rights

You may exercise your rights by contacting our data protection team.

Access and rectification

Request copies of data we hold and correct inaccuracies.

Erasure and restriction

Request deletion or limited processing where appropriate.

Portability and objection

Receive data in a structured format or object to processing.

Data transfers

We primarily store data within the United Kingdom and the European Economic Area.

Any transfers outside these regions follow appropriate safeguards.