Privacy Policy

I collect only the information needed to respond to enquiries and deliver my services:

Contact and booking details - when you book a discovery call through Calendly, you provide your name, email address and any notes you choose to share about your organisation or account.

Enquiry details - if you contact me directly by email, I receive your email address and the contents of your message.

This website does not run advertising cookies, remarketing tags or invasive tracking.

I use your personal data to:

Respond to your enquiry and arrange our discovery call.

Take steps towards a potential engagement, such as preparing for our call or scoping a project.

Deliver consultancy services if we go on to work together.

The lawful basis for this processing is legitimate interest (responding to enquiries about my services) and, where relevant, taking steps at your request before entering into a contract.

Bookings are handled by Calendly, which processes your booking details as a data processor on my behalf. Calendly's own privacy policy applies to their systems.

I do not sell your data or share it with anyone else for marketing purposes.

I keep enquiry and booking details for as long as they are needed for the purpose they were collected - typically no longer than 12 months after our last contact if we don't work together, or for the duration of our engagement plus any period required by law (for example, accounting records) if we do.

Under UK data protection law you have the right to:

Access the personal data I hold about you.

Ask for it to be corrected or deleted.

Object to or restrict how it is processed.

Request a copy in a portable format.

Withdraw consent where processing is based on consent.

To exercise any of these rights, email tompinksppc@gmail.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how your data has been handled.

Some service providers (such as Calendly) may process data outside the UK. Where this happens, transfers are covered by appropriate safeguards such as the UK-US Data Bridge or standard contractual clauses.

I may update this policy from time to time. The latest version will always be published on this page. Last updated: September 2026.