Privacy Policy

1. Who we are

Consulty is a consult-acquisition agency working with professional services practices, specialising in estate planning, family law and tax advisory firms in Greater Manchester and across the North West of England.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Consulty is the data controller of the personal information described in this policy. You can contact us at any time by emailing hello@goconsulty.ai.

2. Information we collect

We collect the following categories of personal information:

• Enquiry and booking details — your name, email address, telephone number and any information you provide when you book a discovery call or submit an enquiry through this website or the embedded booking calendar.
• Practice information — the name and type of your practice, its location and any details you choose to share about your requirements.
• Technical information — your IP address, browser type, device information and pages visited, collected through standard server logs and any analytics tools we operate.
• Communications — records of correspondence with us, including emails and notes of calls.

3. How we use your information

We use personal information to:

• Arrange, confirm and manage discovery calls and consultations.
• Respond to enquiries and provide information about our services.
• Prepare for and deliver engagements with practices that become clients.
• Improve the performance, security and content of this website.
• Meet legal, regulatory and accounting obligations.

We do not sell your personal information, and we do not use it to send unsolicited marketing from third parties.

4. Lawful bases for processing

Under the UK GDPR, we rely on the following lawful bases:

• Contract — to take steps at your request before entering into a contract, such as booking a discovery call, and to perform a contract once an engagement begins.
• Legitimate interests — to respond to enquiries, operate and improve our website and grow our business, where these interests are not overridden by your rights.
• Legal obligation — where we are required to retain or disclose information by law.
• Consent — where we rely on your consent, for example for optional marketing communications, you may withdraw it at any time.

5. Third-party processors

We use a small number of trusted third parties to operate our business. These include our booking and calendar provider, which powers the embedded scheduling widget on this website, our website hosting provider, and our email provider. Each acts as a data processor or an independent controller under its own privacy terms, and each is given only the information necessary to provide its service.

Where a provider processes data outside the United Kingdom, we ensure appropriate safeguards are in place, such as the UK Addendum to EU Standard Contractual Clauses or the UK's International Data Transfer Agreement.

6. Data retention

We keep personal information only for as long as necessary. Enquiry and booking information is retained for up to 24 months after our last contact unless an engagement begins, in which case records are kept for the duration of the engagement and for up to six years afterwards to meet legal and accounting requirements. Technical logs are retained for a shorter period, typically up to 12 months.

7. Your rights

Under the UK GDPR, you have the right to:

• Access the personal information we hold about you.
• Have inaccurate information corrected.
• Request deletion of your information in certain circumstances.
• Restrict or object to our processing of your information.
• Receive your information in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email hello@goconsulty.ai. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

8. Security

We apply appropriate technical and organisational measures to protect personal information, including encrypted transport (HTTPS), access controls and limiting access to those who need it. No method of transmission over the internet is completely secure, but we work to protect your information against unauthorised access, alteration or loss.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be reflected on this page, and we encourage you to review it periodically.