Website Privacy & Cookies

Oakwell Consulting Ltd, registered in England and Wales, is the data controller for personal data collected through this website.

This notice covers the website only. Personal data processed as part of a client engagement is covered by our client-facing Privacy Policy and engagement documents.

Information you give us: name, organisation, email address, phone number and any message content submitted through enquiry or download forms.

Information collected automatically: IP address, browser and device type, pages viewed, referring page and approximate location, gathered through server logs and analytics.

To respond to enquiries and provide requested documents or information.

To operate, secure and improve the website and understand how it is used.

To send business communications where you have asked for them or where we have a legitimate interest and you have not objected.

Consent — for optional analytics cookies and marketing communications.

Legitimate interests — for site security, service improvement and responding to business enquiries.

Legal obligation — where we must retain records to comply with law.

Essential cookies are required for the site to function and are always active.

Analytics cookies help us measure usage and are only set where permitted.

You can block or delete cookies through your browser settings; some features may not work as intended if you do.

We share data only with service providers who support the site — for example hosting, email and analytics providers — under contracts that require appropriate safeguards.

We do not sell personal data. We may disclose data where required by law or to protect our legal rights.

Where data is transferred outside the UK or EEA, we rely on adequacy decisions or standard contractual clauses to ensure an equivalent level of protection.

Enquiry records are kept for up to 24 months after last contact unless a client relationship begins, in which case engagement retention periods apply.

Server and analytics logs are retained for a maximum of 14 months.

Under UK GDPR you may request access to, correction of, or deletion of your personal data; restrict or object to processing; withdraw consent; and request data portability.

To exercise any right, contact us using the details published on this site. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

We may update this notice from time to time; the version published here is the current one.