Privacy Policy (UK)

Who we are

Copplestone Consulting Limited (“we”, “us”) is the controller for the personal data described in this notice.

Registered office: 85 Great Portland Street, First Floor, London, United Kingdom, W1W 7LT. Company number: 16545804. ICO registration: ZB924669.

Contact: bwilliamson@copplestoneconsulting.com

What this notice covers

This notice explains what personal data we collect on copplestoneconsulting.com, why and how we use it, our lawful bases, how long we keep it, who we share it with, and your rights. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data we collect

• Contact and enquiry data: name, email, and the content of your message.

• Newsletter data (if you opt in): name, email, marketing preferences.

• Technical/usage data: IP address, device and browser type, pages visited, timestamps, referral source, and similar analytics data (via cookies or similar tech).

• Supplier/partner data (B2B contacts): business contact details and correspondence.

We do not intentionally collect payment card data via our website.

Why we use your data (lawful bases)

We rely on legitimate interests only where they are not overridden by your interests or rights. We have carried out a Legitimate Interests Assessment and can provide a summary on request.

Our lawful bases are:

• Responding to enquiries and providing proposals: Legitimate interests (running our business and replying to you) or Contract if you ask us to take steps before entering into a contract.

• Sending newsletters/updates: Consent. You can withdraw at any time.

• Website analytics and performance: Consent for non-essential cookies; Legitimate interests for strictly necessary cookies.

• Legal and compliance (e.g. records, tax): Legal obligation and Legitimate interests.

Cookies and similar technologies

We use essential cookies to make the site work and (if you agree) analytics cookies to improve it. You can change or withdraw consent at any time via our cookie banner or browser settings. See our Cookie Policy for details of cookie types, purposes and lifetimes. Analytics data is collected using Google Analytics, which uses cookies and similar technologies to collect aggregated website-use data.

Sharing your data

We use trusted processors for: website hosting (Hostinger UK), email/newsletter services (Brevo), analytics (Google Analytics), and productivity tools (Microsoft Office 365). They act under our instructions and are bound by contract. Access is limited to those with a business need-to-know. We do not sell your data. If you subscribe to our newsletter, your data is processed by Brevo, acting as our data processor under contract. We do not buy or sell marketing lists.

International transfers

Some processors may be outside the UK. Where they are, we use appropriate safeguards (e.g., UK Addendum to the EU Standard Contractual Clauses/IDTA or adequacy decisions). Some of our processors (e.g., Google, Microsoft) may store data in the US or EU. We use UK-approved safeguards for these transfers. We periodically review these safeguards to reflect legal changes. You can contact us for a copy of relevant safeguards.

Retention

• Enquiries and correspondence: generally up to 24 months after last contact.

• Newsletter data: until you unsubscribe or we suppress your address.

• Technical/analytics data: see Cookie Policy (typical ranges up to 26 months).

We may keep data longer where needed for legal claims or compliance. We review retained data annually and securely delete what is no longer required.

Your rights

You have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where applicable. Data portability applies where processing is based on consent or contract and carried out by automated means. To exercise your rights, email bwilliamson@copplestoneconsulting.com

We may need to verify your identity. You can withdraw consent at any time by clicking “unsubscribe” in our emails or by contacting us.

You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113. We’d appreciate the chance to resolve your concern first.

Security

We apply appropriate technical and organisational measures to protect your personal data. No internet transmission is 100% secure, but we work to protect confidentiality, integrity, and availability. We use secure hosting, encryption in transit (HTTPS), and access controls to protect data, only with prior consent.

Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Children

Our website and services are designed for business users and are not directed to children.

Changes to this notice

We may update this notice from time to time. We will post the latest version here with an effective date.

Effective date: Monday 13th October 2025

Contact

To exercise any of your data-protection rights, or for questions about this notice, please email bwilliamson@copplestoneconsulting.com. We may need to verify your identity before responding. Questions about this notice or our data practices should be sent to: bwilliamson@copplestoneconsulting.com