How we look after your personal data.

1. Who we are

This website is operated by Insight Consultancy (UK) Limited (“Insight”, “we”, “us”), a company registered in England and Wales under company number 03786400. Our registered office is 337 Holdenhurst Road, Bournemouth BH8 8BT, and our London office is at Suite 4 Westmede House, 383 Clapham Road, London SW9 9BT. We are the controller of the personal data described in this policy.

For any question about this policy or your data, contact Suzanne Holcombe, Managing Director, at sholcombe@insight-consultancy.com.

2. The data we collect

• Enquiries. When you contact us by email, phone or through our website, we collect your name, work email address, organisation, and anything you choose to tell us.
• Clients and prospective clients. Business contact details of people we work with or may work with, such as name, job title, organisation, email and phone number, and our correspondence with them.
• Training participants. Where an organisation books training with us, we may receive participants' names, job titles and email addresses, and record attendance and course feedback.
• Website use. Our website sets no cookies and uses no analytics or advertising trackers. Like any website, our hosting provider automatically records basic technical information, such as IP addresses and pages requested, to keep the site secure and working.

We do not ask for, and ask you not to send us, special category data (such as health information) through this website.

3. How we use it, and our lawful basis

• To reply to your enquiry and discuss how we can help. Lawful basis: our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
• To deliver our consultancy, platform and training services. Lawful basis: performance of a contract, or our legitimate interest where the contract is with your employer.
• To keep in touch with business contacts about services, events or insights relevant to their role. Lawful basis: legitimate interests. You can opt out at any time and we will stop.
• To meet our legal, accounting and tax obligations. Lawful basis: legal obligation.
• To keep our website and systems secure. Lawful basis: legitimate interests.

4. Who we share it with

We share personal data only where needed, and only with:

• service providers who support our business, such as email, IT, document storage and website hosting providers, acting on our instructions;
• partners involved in delivering a service you or your organisation have asked for, such as Cognodata for services delivered on the Cognopay platform, or a card scheme for training delivered under its programmes;
• professional advisers, such as accountants and lawyers; and
• authorities, where the law requires it.

We never sell personal data.

5. International transfers

We operate in the United Kingdom and Spain, and some of our service providers process data elsewhere. Our website loads fonts from Google Fonts, which means your browser shares your IP address with Google when you visit. Where personal data leaves the UK or the European Economic Area, we make sure appropriate safeguards are in place, such as an adequacy decision or standard contractual clauses.

6. How long we keep it

We keep enquiry correspondence for up to two years if no business relationship follows. We keep client and project records for as long as the relationship lasts and for up to seven years afterwards, to meet legal and accounting requirements. After that, we delete or anonymise the data securely.

7. Your rights

Under UK and EU data protection law, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, in certain circumstances;
• restrict or object to our use of your data, including for direct marketing;
• receive your data in a portable format, where applicable; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email sholcombe@insight-consultancy.com. We will respond within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or, in Spain, the Agencia Española de Protección de Datos (aepd.es).

8. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encrypted connections and reputable, secure service providers. Client data entrusted to us during engagements is handled under the confidentiality terms agreed with each client.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.