Privacy policy

Last updated: March 2026

1. Introduction

This Privacy Policy explains how OPAL ADVISORY CONSULTING LTD (“we”, “us”, “our”) collects, uses, and protects personal information when you visit our website or contact us.

We are committed to handling your data responsibly, transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy, you can contact us at contact@opaladvisory.co.uk.

2. Who We Are

OPAL ADVISORY CONSULTING LTD
Company number: 17092869
Registered office: 167–169 Great Portland Street, London, England, W1W 5PF

We are the “data controller” for the purposes of UK data protection law.

3. Information We Collect

We collect only the information necessary to operate our website, respond to enquiries, and improve our services.

3.1 Information you provide directly

When you submit a form on our website, we collect:

• Name

• Email address

• Any information you include in your message

We do not request or collect sensitive personal data through the website.

3.2 Information collected automatically

When you visit our website, certain data is collected automatically through:

• Squarespace Analytics (built‑in)

• Google Analytics

• Cookies and similar technologies

This may include:

• IP address

• Browser type and version

• Device information

• Pages viewed and time spent on the site

• Referring website

This information helps us understand how visitors use our site and improve user experience.

4. How We Use Your Information

We use your information for the following purposes:

4.1 To respond to enquiries

When you contact us, we use the information you provide to respond and follow up.

Lawful basis:

• Legitimate interests (responding to enquiries)

• Contract (taking steps at your request before entering into a contract)

4.2 To operate and improve our website

Analytics data helps us understand site performance and user behaviour.

Lawful basis:

• Legitimate interests (ensuring the website is functional, secure, and user‑friendly)

4.3 To maintain website security

We may use technical information to detect and prevent malicious activity.

Lawful basis:

• Legitimate interests (protecting our website and users)

We do not use your data for direct marketing unless you explicitly opt in at a later date.

5. Cookies

Our website uses cookies to:

• Enable core site functionality

• Analyse site traffic and performance

You can manage or disable cookies through your browser settings. Our cookie banner allows you to accept or decline non‑essential cookies.

6. Sharing Your Information

We only share your data with trusted third‑party service providers who support our operations. These include:

• Squarespace — website hosting, analytics, form submissions (USA & globally)

• Google Analytics — website analytics (USA & globally)

• Microsoft 365 — email communications (UK/EU/USA depending on routing)

These providers may process data outside the UK. Where they do, they rely on appropriate safeguards such as Standard Contractual Clauses. We do not sell or rent your personal data.

7. Data Retention

We keep personal data only for as long as necessary for the purposes described above.

Typical retention periods:

• Enquiry emails: up to 12 months

• Analytics data: retained according to provider settings (e.g., Google Analytics defaults)

• Server logs: short‑term retention for security and diagnostics

We may retain information longer if required by law or to establish or defend legal claims.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion of your data

• Object to processing based on legitimate interests

• Restrict processing in certain circumstances

• Request data portability

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at contact@opaladvisory.co.uk.

9. Security

We take appropriate technical and organisational measures to protect your data, including secure hosting, access controls, and encryption where appropriate. However, no online transmission is completely secure, and we cannot guarantee absolute security.

10. Links to Other Websites

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those websites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the most recent version.