Privacy Policy

Effective Date: 10/11/2025

Data Controller: Owain Groves-Lock, Draig Behaviour Consultancy Ltd (16799909)
Contact Email: info@draigbehaviourconsultancy.co.uk

We are committed to protecting the privacy of all clients and website users. This privacy policy explains how we collect, use, and store personal information submitted via our website, including through contact forms and testimonials.

1. Information We Collect

When you use our website or contact us, we may collect:

  • Name

  • Email address

  • Phone number

  • Information included in your message or inquiry

We do not collect more information than necessary for the purposes outlined below.

2. Purpose of Collection

We use the personal data you provide to:

  • Respond to inquiries or messages

  • Schedule appointments or provide services

  • Maintain records for professional and legal purposes

  • Use testimonials for marketing, with consent and anonymisation, as described below

3. Legal Basis for Processing

Our legal basis for processing your data is:

  • Consent – when you submit your information and/or agree to a testimonial being used

  • Legitimate interests – to provide services, respond to inquiries, and maintain professional records

4. Contact Forms and Email Handling

  • Contact form submissions are sent directly to our secure company email address: info@draigbehaviourconsultancy.co.uk.

  • Only authorised personnel (currently, the sole director) may access this email.

  • For general inquiries or marketing-related messages, emails may be deleted immediately after responding.

  • For potential or active clients, emails will be retained in a dedicated folder as part of professional records for a minimum retention period (typically 6–7 years, in line with UK-SBA guidance).

  • Emails are protected with strong passwords, and two-factor authentication is enabled.

5. Testimonials

  • Testimonials are only used after services have been completed.

  • We may use anonymised testimonials for promotional purposes.

  • Each testimonial will indicate whether it was solicited (requested) or unsolicited (offered voluntarily).

  • No personally identifiable information will be shared without your explicit consent.

6. Data Sharing

We do not sell or share your personal information with third parties, except:

  • For professional or legal obligations

  • With GDPR-compliant service providers who assist in website hosting or email communication

7. Data Retention

  • Personal data will only be kept as long as necessary for the purposes outlined above.

  • General inquiries may be deleted immediately after processing.

  • Client-related communications are retained as part of professional records for the required retention period.

  • Testimonials are stored only in anonymised form with clear indication of whether they were solicited or unsolicited.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Correct any inaccuracies

  • Request deletion or restriction of processing

  • Object to processing

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, contact us at info@draigbehaviourconsultancy.co.uk.

9. Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, or loss.

10. Changes to This Policy

We may update this privacy policy from time to time. The effective date at the top indicates the most recent version.