How we use your information
Data Controller Information
Data Controller: Elehan Consulting Ltd
Website: www.elehanconsulting.co.uk
Email: stewart@elehanconsulting.co.uk
Address: 18 Lisle Place, Wotton Under Edge, GL12 7BJ
This privacy policy explains how we collect, use, and protect your personal information when you interact with our consultancy services, whether online through our website, in person during consultations, or at events.
Our Commitment to Data Protection
We are committed to protecting your privacy and ensuring compliance with all applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025. This policy applies to all personal data processing activities across England, Scotland, Wales, and Northern Ireland.
Information We Collect
Personal Information You Provide
We collect personal information when you:
Complete our online contact forms or enquiry forms
Engage our consultancy services
Attend our events or webinars
Subscribe to our newsletter or updates
Communicate with us via email or phone
This information may include:
Contact details: Name, email address, phone number, business address
Professional information: Job title, company name, industry sector
Service requirements: Details about your consultancy needs and project specifications
Financial information: Billing details and payment information for our services
Communication records: Records of our conversations and correspondence
Information Collected Automatically
When you visit our website, we automatically collect:
Technical data: IP address, browser type, operating system
Usage data: Pages visited, time spent on site, referral sources
Device information: Screen resolution, device type, location data (where permitted)
We use cookies and similar technologies to enhance your website experience. For detailed information about our cookie usage, please see our Cookie Policy.
How We Use Your Information
We process your personal data for the following purposes:
Service Delivery (Lawful Basis: Contract)
Providing consultancy services you have requested
Managing client relationships and project delivery
Processing payments and invoicing
Communicating about ongoing projects and service updates
Business Operations (Lawful Basis: Legitimate Interests)
Responding to enquiries and providing information about our services
Maintaining and improving our website functionality
Analyzing usage patterns to enhance our service offerings
Ensuring network and information security
Preventing fraud and maintaining business security
Marketing and Communications (Lawful Basis: Consent or Legitimate Interests)
Sending newsletters and service updates (with your consent)
Providing information about relevant services and events
Conducting market research and analysis
Legal and Regulatory Compliance (Lawful Basis: Legal Obligation)
Complying with accounting and tax requirements
Meeting regulatory obligations
Responding to legal requests and court orders
Data Sharing and Disclosure
We may share your personal information with:
Service Providers
IT service providers and cloud hosting services
Payment processors and accounting services
Marketing and email service providers
Professional advisors (legal, accounting, insurance)
Legal Requirements
We may disclose your information if required by law, regulation, or court order, or to protect our legitimate interests or those of third parties.
Third-Party Partners
With your consent, we may share information with trusted partners who provide complementary services relevant to your business needs.
All third-party processors are bound by appropriate data processing agreements and must comply with UK data protection standards.
International Data Transfers
Some of our service providers may be located outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:
Adequacy decisions from the UK government
Standard contractual clauses approved by the ICO
Additional technical and organizational measures to protect your data
Data Retention
We retain your personal information only for as long as necessary for the purposes outlined in this policy:
Client service records: 6 years after contract completion (for legal and accounting purposes)
Marketing communications: Until you unsubscribe or withdraw consent
Website analytics: 26 months from collection
Financial records: 6 years from the end of the financial year
General enquiries: 2 years from last contact
These retention periods may be extended where required by law or for legitimate business purposes such as legal proceedings.
Your Rights
Under UK data protection law, you have the following rights:
Right to be Informed
You have the right to know how your personal data is being processed (fulfilled by this privacy policy).
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can ask us to correct inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can ask us to limit how we process your personal data.
Right to Data Portability
You can request your data in a structured, commonly used format.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Right to Complain
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not handled your personal data appropriately.
To exercise any of these rights, please contact us using the details provided at the beginning of this policy.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
Encryption of data in transit and at rest
Access controls limiting data access to authorized personnel
Regular security assessments and updates
Staff training on data protection principles
Incident response procedures for data breaches
Cookies and Online Tracking
Our website uses cookies and similar technologies. We obtain your consent for non-essential cookies in accordance with the Privacy and Electronic Communications Regulations (PECR). You can manage your cookie preferences through your browser settings or our cookie consent tool.
Data Protection Registration
We are registered with the Information Commissioner’s Office (ICO) and pay the required data protection fee. Our registration demonstrates our commitment to data protection compliance and transparency.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes through our website or direct communication.
Contact Information
For any questions about this privacy policy or how we handle your personal data, please contact us:
Email: stewart@elehanconsulting.co.uk
Phone: 07795174537
Address: 18 Lisle Place, Wotton under Edge, GL12 7BJ
Data Protection Officer: N/A
Email: N/A
Complaints
If you have concerns about how we handle your personal data, you can contact:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113
Email: icocasework@ico.org.uk
Last Updated: 16th July 2025
Version: 1.0