PRIVACY POLICY

Last Updated: February 2026

1. Introduction

This privacy policy explains how David Hassall Consultancy (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit our website, enquire about our services, or engage us for consultancy. We are committed to protecting your privacy in accordance with the UK GDPR and the Data Protection Act 2018.

2. The Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, including:

  • Identity Data: Name, job title, and company name.

  • Contact Data: Email address, telephone numbers, and billing address.

  • Technical Data: IP address, browser type, and location data (via cookies).

  • Project Data: Information provided for tenders, awards, or web builds (this may include staff CVs or technical credentials).

  • Marketing Data: Your preferences in receiving communications from us.

3. How We Collect Your Data

We use different methods to collect data from and about you including:

  • Direct Interaction: When you fill in forms on our site or correspond with us by post, phone, or email.

  • Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing patterns.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use it in the following circumstances:

  • Performance of a Contract: To deliver the services you have hired us for (e.g., writing a bid or building a site).

  • Legitimate Interests: For our business interests in managing and improving our services.

  • Complying with Legal Obligations: Where we need to comply with a legal or regulatory requirement.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees, agents, and contractors who have a business “need to know.”

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

7. Your Legal Rights

Under UK data protection laws, you have rights including:

  • The right to access – You can ask for copies of your personal data.

  • The right to rectification – You can ask us to correct inaccurate information.

  • The right to erasure – You can ask us to erase your personal data in certain circumstances.

  • The right to object – You can object to the processing of your data.

8. International Transfers

We do not typically transfer your personal data outside of the UK. If we do (for example, using a global cloud storage provider), we ensure a similar degree of protection is afforded to it.

9. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact:

Full Name: David Hassall Email Address: hello@davidhassall.co.uk

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).