- Telephone 0333 339 0051
- Email: rb@rbconsultancyltd.co.uk
- Names and contact details
- Addresses
- Usage data (including information about how you interact with and use our website, products and services)
- Video recordings
- Records of meetings and decisions
- Names and contact details
- Addresses
- Payment details
- Video recordings of private or staff only areas
- Customer or client accounts and records
Lawful bases and data protection rights
- Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
- Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
- Your right to erasure - You have the right to ask us to delete your personal information.
- Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.
- Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: The personal information we collect (contact details) fulfils the need to have open communication. This information may be collected through various channels, such as personal interactions (face to face meetings), email, social media, website, etc. The information is typically volunteered based on the data subject actively providing contact details in one form or another.
- Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: If there is a query, compliant or claim, information (such as contact details) are required in order to process the request.
- Directly from you
- Regulatory authorities
- Legal bodies or professionals (such as courts or solicitors)
- Publicly available sources
- Suppliers and service providers
- Third parties
We keep personal information only for as long as we need it for the purposes described in this notice, and to comply with our legal and regulatory obligations. Typical retention periods include:
- Enquiry and contact data: up to 24 months from last contact
- Client and engagement records: 6 years from end of engagement, to meet UK statutory and tax obligations
- Website analytics: standard Google Analytics retention period of up to 14 months
- Booking and meeting records: up to 24 months from the booking date
Where information is no longer required, it is securely deleted or anonymised.
We do not sell your personal information. We share information only with carefully chosen processors who help us run our services, and with regulators or law enforcement where we are required to do so. Categories of processor include:
- Web hosting and infrastructure providers
- Email, document collaboration and productivity providers
- Online meeting and scheduling tools
- Analytics and website improvement tools
- Certification body partners where you have engaged us for certification services
The specific processors we currently use are listed below.
Website service providers
The following processors support the operation of this website:
- SiteGround Hosting Ltd — web hosting, server-side security and performance services for this website
- SiteGround Site Mailer — outbound delivery of contact form and transactional emails sent from this website
- Cal.com Inc. — booking and scheduling service used for the 30-minute discovery call widget
- Google LLC (Analytics) — anonymous analytics relating to website usage and performance
- Google LLC (Fonts and Maps) — typography and embedded map for office location
Each of these processors handles only the information needed to deliver its specific service, in line with their own data protection commitments and our written processor terms.
Microsoft, Red Circles ITS Limited, Cyber Sense Limited
These data processors do the following activities for us: data storage, application services, certification services and/or penetration testing services
IASME, Air Communications Limited, Red Five Technology Solutions Limited, Baltum Bureau
These data processors do the following activities for us: client leads, prospects and referrals
How to complain
If you have any concerns about our use of your personal information, please contact us in the first instance using the details at the top of this notice. We will do everything we can to address your concern.
If you are not satisfied with our response, you have the right to make a complaint to the UK Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint
Arrange a call to see how we can help
Book a call to explore how we can work together and ensure cyber security is switched on for your organisation
