Privacy Policy

Cottrell-Young Consultancy

1. Who we are

Cottrell-Young Consultancy (“we”, “us”, “our”) provides quality and management system consultancy services.

Contact details:
Email: admin@cottrellyoungconsultancy.com

2. What personal data we collect

We may collect and process the following personal data:

  • Name

  • Business email address

  • Any information you choose to include in correspondence

  • Documents or information shared as part of consultancy work

This information may be collected via:

  • our website contact form

  • direct email correspondence

  • secure shared document folders provided for project delivery

Where we provide clients with access to secure shared document folders, we may process limited personal data such as names, business email addresses, and documents uploaded or shared by the client as part of delivering consultancy services.

3. How we use your data

We use personal data solely to:

  • respond to enquiries

  • discuss potential or ongoing consultancy services

  • provide secure document sharing and collaboration during consultancy projects

We do not use personal data for marketing purposes without explicit consent.

4. Legal basis for processing

Under UK GDPR, our lawful bases for processing personal data are:

  • Legitimate interests — responding to enquiries and delivering professional consultancy services

  • Consent — where you voluntarily submit information via our contact form or email

5. How your data is stored

  • Website data is processed and stored by Squarespace, our website hosting provider

  • Email correspondence and project documentation are stored securely using Google Workspace (including Gmail and Google Drive)

Both providers apply appropriate technical and organisational measures to protect personal data.

6. Data sharing

We do not sell, trade, or share personal data with third parties, except:

  • where required by law, or

  • where necessary to fulfil contractual obligations, using trusted service providers subject to appropriate safeguards

7. Data retention

We retain personal data only for as long as necessary to:

  • respond to enquiries

  • deliver consultancy services

  • meet contractual or legal obligations

Project-related documents shared via secure folders are retained only for the duration of the engagement, unless otherwise agreed, and are deleted or returned following project completion. Data is periodically reviewed and securely deleted when no longer required.

8. Your rights

Under UK GDPR, you have the right to:

  • request access to your personal data

  • request correction or deletion of your data

  • object to or restrict processing

  • withdraw consent at any time

To exercise these rights, please contact us at admin@cottrellyoungconsultancy.com.

9. Cookies and analytics

Our website may use standard Squarespace analytics to understand website usage. These do not identify individual users.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.