Privacy Policy

01Scope of this policy

This policy applies to information we collect through our website, through enquiry and consultation forms, through email and other correspondence, and in the course of delivering our Services. It does not apply to third-party websites or services that we do not control, even where we link to them. When you provide us with information belonging to your own organization, employees, partners, or clients, you confirm that you are entitled to share that information with us for the purposes described here.

02Information you provide to us

Most of the information we hold is information you choose to give us so that we can prepare your proposals and respond to your enquiries. This may include:

• Identifying and contact details such as your name, company name, role, email address, and telephone number;
• The contents of any message, brief, or enquiry you send us through our website or by email;
• Opportunity and solicitation materials, including RFP documents, requirements, and submission instructions you ask us to work from;
• Business information about your company, such as qualifications, past performance, capabilities, pricing, and strategy;
• Feedback, revisions, and other correspondence exchanged during an engagement.

You are not obliged to provide any particular piece of information, but if you withhold information we need, we may be unable to provide some or all of the Services.

03Information collected automatically

When you visit our website, certain information may be collected automatically by us or by our service providers. This can include your device type, browser, operating system, approximate location derived from your IP address, the pages you view, and the dates and times of your visits. This information helps us understand how our website is used, keep it secure, and improve it. Where this information is collected through cookies and similar technologies, our Cookie Policy provides further detail.

04How we use information

We use the information we collect for legitimate business purposes connected to providing and improving our Services, including to:

• Respond to your enquiries and provide the consultations and Services you request;
• Prepare, draft, revise, and deliver proposals, RFP responses, templates, and strategy work;
• Communicate with you about your engagement, including drafts, feedback, scheduling, and deadlines;
• Administer our business, including invoicing, record-keeping, and managing payments;
• Maintain the security and integrity of our website and systems;
• Comply with our legal and regulatory obligations and enforce our agreements.

We do not sell your personal information, and we do not use the confidential business information you share with us for any purpose other than serving you, except as required by law.

05Legal bases for processing

Where applicable law requires a legal basis for processing personal information, we rely on one or more of the following: your consent; the performance of a contract with you or steps taken at your request before entering into a contract; our legitimate interests in operating and improving our business in a way that does not override your rights; and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time, although this will not affect processing already carried out.

06How we share information

We share information only where necessary and with appropriate safeguards. We may share information with:

• Trusted service providers who help us operate our business, such as hosting, email, scheduling, document, and payment providers, who are permitted to use the information only to provide services to us;
• Professional advisers, such as accountants and legal counsel, where reasonably required;
• Authorities or other parties where we are required to do so by law, regulation, or valid legal process, or to protect our rights, safety, or property.

We do not disclose the confidential materials you provide for an engagement to any party outside the engagement except as needed to deliver the Services or as required by law.

07Service providers and international transfers

Because we operate as a remote practice, the providers we rely on may store or process information in the United States or other countries. Where information is transferred across borders, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and applicable law, including through appropriate contractual protections with our providers.

08Data retention

We keep personal and business information only for as long as necessary for the purposes described in this policy, including to deliver the Services, maintain business records, resolve disputes, and meet our legal obligations. Engagement materials are typically retained for a reasonable period after completion so that we can support follow-on work and respond to queries, after which they are deleted or anonymized unless a longer retention period is required or agreed.

09How we protect information

We use reasonable administrative, technical, and organizational measures designed to protect information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include limiting access to information to those who need it, using reputable service providers, and applying sensible security practices. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10Your rights and choices

Depending on your location, you may have rights in relation to your personal information, which can include the right to access, correct, update, or delete it; to object to or restrict certain processing; to request a copy in a portable format; and to withdraw consent where we rely on it. To exercise any of these rights, please contact us using the details below. We will respond in accordance with applicable law and may need to verify your identity before acting on a request.

11Marketing communications

If we send you occasional updates or information about our Services, you may opt out at any time by following the instructions in the message or by contacting us. We will continue to send you communications necessary for the administration of an active engagement regardless of your marketing preferences.

12Children's privacy

Our website and Services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate steps to remove it.

13Third-party links

Our website may contain links to third-party websites or resources. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party site you visit.

14Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date above reflects the most recent revision. Where changes are material, we will take reasonable steps to bring them to your attention. Your continued use of our website or Services after an update constitutes acceptance of the revised policy.

15Contact

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please contact us using the details below, and we will be glad to help.