Privacy Policy

Last updated: 8th September 2026

1. Who we are

Bennett Technology Consulting Ltd ("we", "us", "our") is the controller of the personal data described in this policy.

Registered in England and Wales, company number 16931531
Registered office: 167-169 Great Portland Street, London, W1W 5PF
Email: colin.bennett@bennettconsulting.co.uk

We have not appointed a Data Protection Officer, as we are not required to do so. Data protection queries should be sent to the email address above.

2. What this policy covers

This policy explains how we handle personal data collected through www.bennettconsulting.co.uk and in the course of enquiries about our services.

3. The personal data we collect and why

Enquiries

When you contact us by email, we receive your email address, your name, and whatever else you choose to include, such as your organisation, role, and the details of your enquiry.

Purpose: to respond to you, and to discuss and scope possible work.
Lawful basis: our legitimate interests in responding to business enquiries and operating our business. Where your enquiry leads towards an engagement, we also rely on the need to take steps at your request before entering into a contract.

Website usage

Our website is provided using the IONOS platform and uses IONOS SiteAnalytics. This collects the page or file requested, the referring page, your browser type and version, operating system, device type, the time of access, and your IP address in anonymised form, which is used only to determine the general location of access. It uses a tracking pixel and server log files rather than cookies.

Purpose: to understand how the site is used and to improve it.
Lawful basis: your consent, given through our cookie banner. You can withdraw it at any time using the privacy settings control on the site.

Server logs and security

Our hosting provider keeps technical logs, which include IP addresses, as part of running and protecting the site.

Purpose: security, fault diagnosis, and keeping the site available.
Lawful basis: our legitimate interests in maintaining a secure and functioning website.

Contact form. If you send a message using the contact form, I collect your name, email address, any company name you give, and the content of your message. I use this only to respond to your enquiry and to any follow-up correspondence about it. The lawful basis is legitimate interest in responding to business enquiries, and taking steps at your request prior to entering a contract. Form submissions are processed and stored by IONOS as my website provider. I keep enquiries for 6 months unless they lead to an engagement, in which case they're kept as part of the client record.

4. Cookies and similar technologies

Our cookie banner lets you accept or reject each non-essential category before it loads. Strictly necessary cookies, which are needed for the site to work, are always set.

You can change your choices at any time using the privacy settings control on the site, and you can block or delete cookies through your browser settings, though parts of the site may not work as intended if you do.

5. Who we share personal data with

We do not sell personal data and we do not share it for advertising.

We share it with:

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany — our website host and platform provider, and the provider of SiteAnalytics.
Our professional advisers, such as accountants, where necessary.
Public authorities, where we are legally required to disclose.

6. International transfers

Our website platform and analytics are provided by IONOS SE. The personal data involved is processed in Germany and elsewhere in the European Union, and IONOS states that no SiteAnalytics data is transferred outside the European Union. Transfers of personal data from the UK to countries in the European Economic Area are permitted under the UK's adequacy regulations, so no further safeguards are needed.

Where we transfer personal data to a country not covered by UK adequacy regulations, we use the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the assessment the law requires.

7. How long we keep personal data

Enquiries that do not lead to an engagement: up to 12 months from our last contact with you.
Client records, including contracts and correspondence: six years after the end of the engagement, which reflects both the limitation period for contract claims and our record-keeping obligations to HMRC.
Accounting records: six years from the end of the accounting period they relate to.
Website analytics: 8 weeks, after which IONOS deletes the data automatically.

We delete or anonymise personal data once these periods expire, unless we are required to keep it for longer.

8. Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal data we hold about you;
ask us to correct data that is inaccurate or incomplete;
ask us to delete your data in certain circumstances;
ask us to restrict how we use your data in certain circumstances;
object to processing we carry out on the basis of our legitimate interests;
receive certain data in a portable format; and
withdraw your consent at any time, where we rely on consent. Withdrawing consent does not affect processing carried out before you withdrew it.

To exercise any of these rights, email colin.bennett@bennettconsulting.co.uk. We will respond within one month. We may ask you for information to confirm your identity before we act.

We do not make decisions about you by automated means, and we do not carry out profiling.

9. Complaints

If you are unhappy with how we have handled your personal data, you can complain to us directly by emailing colin.bennett@bennettconsulting.co.uk, or by writing to us at our registered office. You do not need to use any particular wording or refer to any legislation.

We will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, and tell you the outcome.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You can complain to the ICO at any time; you do not have to come to us first.

10. Security

We take reasonable technical and organisational measures to protect personal data, including access controls on the devices and accounts we use, and encrypted connections to our website.

11. Children

Our website and services are directed at businesses. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be flagged on this page.

Home