Last Updated: March 7, 2026
1. Introduction
Welcome to H Ann Edwards Ltd ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
By accessing or using our website, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please do not access the site. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Fill out our contact form or request a consultation
- Subscribe to our newsletter or marketing communications
- Engage our consulting services
- Contact us via email, phone, or social media
- Participate in surveys, events, or promotions
- Apply for employment with us
This information may include:
- Name, title, and job position
- Company name and industry
- Email address and phone number
- Postal address and billing information
- Professional background and business interests
- Any other information you choose to provide
2.2 Automatically Collected Information
When you visit our website, we may automatically collect certain information about your device and usage, including:
- IP address and browser type
- Operating system and device information
- Pages visited, time spent, and navigation patterns
- Referring website or search terms
- Geographic location (country/city level)
3. How We Use Your Information
We use the information we collect for the following legitimate business purposes:
- To provide our services: Delivering marketing consulting, strategic planning, and related professional services
- To communicate with you: Responding to inquiries, sending proposals, and providing client support
- To improve our services: Analyzing website usage and client feedback to enhance our offerings
- For marketing purposes: Sending relevant industry insights, case studies, and service updates (with your consent)
- For legal compliance: Meeting regulatory requirements, tax obligations, and professional standards
- To protect our rights: Preventing fraud, enforcing our terms, and ensuring security
4. Legal Basis for Processing (GDPR)
Under the UK GDPR, we process your personal data based on the following legal grounds:
- Contractual necessity: Processing necessary to fulfill our consulting agreements
- Legitimate interests: Business development, network building, and service improvement
- Legal obligation: Compliance with tax, accounting, and regulatory requirements
- Consent: Marketing communications and optional data processing (you may withdraw consent at any time)
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your data with:
- Service providers: IT support, cloud hosting, email marketing platforms, and payment processors who assist our operations
- Professional advisors: Legal, accounting, and insurance professionals bound by confidentiality
- Regulatory authorities: When required by law or professional standards
- Business transfers: In connection with a merger, acquisition, or asset sale (with appropriate safeguards)
All third parties are contractually obligated to protect your data and use it only for specified purposes.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmission
- Secure cloud storage with access controls
- Regular security assessments and penetration testing
- Staff training on data protection and confidentiality
- Incident response procedures
While we strive to protect your information, no internet transmission is completely secure. We encourage you to use strong passwords and protect your devices.
7. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
- Client records: 7 years after project completion (for legal and professional requirements)
- Marketing contacts: Until you unsubscribe or request deletion
- Website analytics: 26 months (anonymized where possible)
- Employment applications: 12 months unless you consent to longer retention
8. Your Rights
Under UK data protection law, you have the following rights:
- Right to access: Request a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete information
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests or direct marketing
- Right to withdraw consent: Withdraw consent at any time (without affecting prior lawful processing)
To exercise these rights, please contact us using the information below. We will respond within one month.
9. Cookies and Tracking
Our website uses cookies and similar technologies to enhance your experience:
- Essential cookies: Required for website functionality (cannot be disabled)
- Analytical cookies: Help us understand how visitors interact with our site (Google Analytics)
- Marketing cookies: Used to deliver relevant content and measure campaign effectiveness
You can manage cookie preferences through your browser settings. For more information, please see our Cookie Policy.
10. International Data Transfers
We are based in the United Kingdom. If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as:
- UK adequacy regulations
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules (for group transfers)
11. Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be notified via email or prominent website notice. The "Last Updated" date at the top indicates the most recent revision.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
14. Complaints
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF