Privacy Policy
This notice explains how Clan Consulting collects, uses and protects personal information when you contact us, use our website or engage our consultancy services.
Contact details
Email: jolanda@clan.consulting
What information we collect, use and why
To provide and improve consultancy services, we may use names, business contact details, addresses, transaction and payment information, project communications, records of meetings and decisions, and audio or video recordings where meetings or calls are recorded. We may also process website usage information.
For information updates and marketing, we may use names, contact details, marketing preferences, website usage and journey information, and IP addresses, where relevant to the activities we actually operate.
To comply with legal requirements, we use information required for accounting, tax, regulatory and other legal obligations.
To respond to enquiries, complaints or claims, we may use contact details, relevant correspondence, client and service records, financial information and information necessary to investigate and resolve the matter.
Lawful bases for using personal information
Consultancy services
We rely on contract where processing is necessary to enter into or perform a contract with an individual, and legitimate interests to manage professional relationships, communicate with client representatives, deliver and improve our services and maintain appropriate business records. We use only information relevant to these purposes and consider individuals’ privacy rights.
Marketing and updates
We rely on legitimate interests where appropriate to develop professional relationships and communicate about relevant services. Where electronic marketing rules require consent, we obtain it before sending marketing communications. You can opt out of direct marketing at any time. Contract is not relied upon as a general basis for promotional marketing.
Legal obligations and enquiries
We rely on legal obligation where processing is necessary to comply with applicable law. We rely on legitimate interests to answer enquiries, handle complaints, resolve disputes and protect our business interests, where this is proportionate. A legal obligation may also apply to specific requests or complaints.
Your data protection rights
Depending on the circumstances and the lawful basis, you may have rights to access your information, correct inaccurate information, request deletion or restriction, object to processing, and request data portability. Where we rely on consent, you may withdraw it at any time. You have an absolute right to object to the use of your personal information for direct marketing.
To exercise your rights, email jolanda@clan.consulting. We will respond without undue delay and normally within one month, subject to applicable legal rules and exemptions. You can find further information about your rights at ico.org.uk.
Where we get personal information from
Directly from you, including when you contact us or work with us.
Publicly available professional sources, where relevant.
Clients, advertising and creative agencies, business partners, professional contacts and other organisations involved in projects, referrals or professional introductions.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described above, including any applicable legal, accounting or dispute-resolution requirements. Our usual retention periods are:
Client contracts, project records and related correspondence: generally up to six years after the end of the client relationship, unless a longer or shorter period is justified.
Accounting and tax records: generally six years, or longer where required by applicable law.
Enquiries that do not lead to a client engagement: generally up to 12 months after the last meaningful contact, unless further retention is justified.
Marketing contact details: until you unsubscribe, object or withdraw consent, subject to retaining limited suppression information to respect your preference.
Website analytics and technical data: according to the retention settings and policies of the relevant services; we periodically review these settings.
Complaints and disputes: for as long as necessary to resolve the matter and manage any related legal claims.
These are proposed operating periods for Clan Consulting and should reflect how records are actually managed.
Who we share information with
We use service providers to host and operate our website, provide email and cloud-based business software, store business information and support analytics. These may include Wix and Google services, depending on the tools in use. Some providers act as processors on our behalf; others may act as independent controllers for certain activities.
Where necessary, we may also share relevant information with professional or legal advisers, professional consultants and organisations to which disclosure is legally required. We do not publish personal information on our website merely because someone contacts us.
Sharing information outside the UK
Some technology providers and their sub-processors may process personal information outside the UK, including in Israel, the United States and other locations. Where a restricted international transfer occurs, we rely on an applicable UK adequacy regulation (including the UK–US data bridge where the recipient and transfer qualify), or appropriate contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to EU Standard Contractual Clauses, as applicable.
Wix.com Ltd is based in Israel, which benefits from UK adequacy recognition. This does not mean that every onward transfer by Wix to the United States or other countries is automatically covered by adequacy. The mechanism for those onward transfers depends on the receiving organisation and the relevant provider terms. Google services may also involve transfers under applicable adequacy arrangements or contractual safeguards.
You can contact us at jolanda@clan.consulting for further information about safeguards relevant to your information.
Website analytics, cookies and marketing
Our website may use essential cookies and, where enabled, analytics or other optional technologies. Where UK law requires consent for non-essential cookies or similar technologies, we will request it before they are used. The precise tools and settings used on the website should be reflected in our cookie controls and any cookie information displayed to visitors.
If we introduce a newsletter or additional marketing tools, we will update this notice as needed and provide the required sign-up and unsubscribe options.
How to complain
If you have concerns about how we use personal information, please email jolanda@clan.consulting so we can look into them.
You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint; telephone 0303 123 1113. ICO Head Office, 4th Floor, No. 3 Circle Square, 5 Hawkshaw Street, Manchester M1 7BL.