1. Introduction

This Privacy Policy explains how Collova Consulting Ltd. (“we”, “us”, “our”) collects and uses personal data when you visit our website or contact us.

We are committed to protecting your privacy and handling personal data in a transparent and lawful manner, in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

2. Who we are

Collova Consulting Ltd. is the data controller for the purposes of data protection law. We are registered with the Information Commissioner's Office with number ZC016020

If you have any questions about this policy or how we use your data, you can contact us using the details provided on this website.

3. Personal data we collect

We collect only limited personal data, namely Contact details that you choose to provide to us, such as your name, email address, telephone number, and the content of your enquiry, when you contact us via the website or by email.

We do not require users to create accounts, and we do not collect payment details through this website.

4. How we use your data

We use personal data only for the following purposes:

to respond to enquiries or correspondence initiated by you;

to communicate with you in relation to potential or existing professional engagements;

to comply with legal or regulatory obligations, where applicable.

We do not use your data for automated decision-making or profiling.

5. Legal basis for processing

Our processing of personal data is based on one or more of the following lawful grounds:

• legitimate interests, namely responding to enquiries and conducting professional communications; and
• where relevant, the taking of steps at your request prior to entering into a contract.

6. Data sharing

We do not sell or rent personal data.

Personal data may be shared only where necessary, for example with:

• professional advisers or service providers (such as IT or email service providers), subject to appropriate confidentiality and data-protection safeguards; or
• regulators, courts, or public authorities where we are legally required to do so.

7. Data retention

We retain personal data only for as long as is reasonably necessary for the purposes for which it was collected, including for legitimate business, legal, or regulatory reasons.

Correspondence that does not lead to an ongoing engagement is typically retained for a limited period and then deleted.

8. Your rights

Under data protection law, you have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure of your personal data, in certain circumstances;
• object to or restrict our processing of your data; and
• lodge a complaint with the Information Commissioner’s Office (ICO).
• Requests can be made using the contact details on this website.

9. Cookies and analytics

This website does not use cookies that collect personal data, other than any cookies that are strictly necessary for the basic operation of the site.

If analytics or similar tools are used, they are configured to collect aggregated, non-identifying information only.

10. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.