Privacy policy

If you have any questions about this policy or how we handle your information, contact us at info@hbaeduconsulting.co.uk or 0330 030 9080.

We collect only the information we need:

• Enquiries: your name, email address, phone number, organisation and the details you include in your message when you use our enquiry form, email or call us.
• Clients and partners: business contact details of the people we work with at schools, trusts, councils and other organisations, and records of the services we provide.
• Website data: our hosting provider keeps standard server logs, such as IP address, browser type and the date and time of a visit, to keep the website secure and working.

We do not use analytics, advertising or tracking cookies on this website.

We use your information to:

• respond to your enquiry and discuss how we can help
• prepare proposals and deliver the services you or your organisation have asked for
• manage invoices, contracts and our business records
• keep this website secure
• meet our legal and regulatory obligations

We will not send you marketing emails unless you have asked us to, and you can opt out at any time.

Under UK data protection law we rely on:

• Legitimate interests: to respond to enquiries, run our business and keep the website secure.
• Contract: where we need your information to take steps before entering into, or to perform, a contract with you or your organisation.
• Legal obligation: where we must keep records, for example for tax purposes.
• Consent: where we ask for it, for example to send you updates. You can withdraw consent at any time.

When we work with pupils or learners on behalf of a school, trust or other organisation, that organisation usually decides how learners’ personal information is used and remains the data controller. We act on its instructions under a written agreement and handle the information in line with its policies and UK data protection law.

We do not sell your information. We share it only where necessary with:

• our website hosting and email providers, who store information on our behalf
• professional advisers such as our accountants, insurers or legal advisers
• regulators or other authorities where the law requires it

Any supplier who handles personal information for us must keep it secure and use it only on our instructions.

Some of our service providers may store information outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as a UK adequacy decision or the UK International Data Transfer Agreement.

• Enquiries that do not lead to work: up to 24 months, then deleted.
• Client and contract records: six years after the end of the work, to meet tax and legal requirements.
• Server logs: in line with our hosting provider’s retention period, normally no longer than 90 days.

We use appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls, strong passwords and regular software updates.

You have the right to:

• access the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information
• ask us to restrict or stop using your information
• object to how we use your information
• ask for your information in a portable format
• withdraw consent where we rely on it

To use any of these rights, contact us at info@hbaeduconsulting.co.uk. We will respond within one month.

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

We may update this policy from time to time. The date at the top of this page shows when it was last changed.