Privacy Policy

Who we are

This website is operated by Griffiths Opperman Consulting ("GOP Consulting", "we", "us"). We are the data controller for personal data collected through this website. You can contact us about anything in this notice at info@gop-consulting.co.uk.

What we collect and why

Enquiries. When you use our contact form or email us, we collect your name, work email, company name and the details you choose to give us. We use this to reply to you and, where you ask us to, to discuss and scope an engagement. Our lawful basis is legitimate interests (responding to business enquiries) or taking steps at your request before entering into a contract.

Website analytics. We use Cloudflare Web Analytics to understand how many people visit the site and which pages they read. It does not use cookies, does not track you across other sites and does not identify you personally. Our lawful basis is legitimate interests (running and improving our website).

We do not sell your personal data, and we do not use it for automated decision-making.

Cookies

This website does not set advertising or tracking cookies. Our hosting provider may use strictly necessary cookies for security, for example to protect the site from malicious traffic.

Who we share it with

We use a small number of service providers who process data on our behalf, under written terms:

• Cloudflare: website hosting, security and cookieless analytics.
• Microsoft: Microsoft 365, which delivers contact form submissions to our inbox and hosts our email.
• Cloudflare Turnstile: checking that contact form submissions come from a person rather than a bot. It does not use advertising cookies.
• Google Fonts: serving the typeface used on this site, which means your browser sends your IP address to Google.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or UK adequacy regulations.

How long we keep it

We keep enquiry correspondence for up to two years after our last contact with you, unless it leads to an engagement, in which case we keep records for as long as needed to meet our contractual, legal and professional obligations.

Your rights

Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to how we use it, and to data portability. To exercise any of these rights, email info@gop-consulting.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

Client engagements

This notice covers our website only. Where we process data on a client's behalf during an engagement, that processing is governed by the data processing agreement in our contract with that client.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.