Privacy Policy

1. Who We Are

This Privacy Policy is issued by D&N Solutions London ("D&N Solutions", "we", "us", "our"), a management consultancy operating in the United Kingdom, with our registered office at 18 Appold Street, London, EC2A 2AS, United Kingdom.

For the purposes of the UK GDPR and the Data Protection Act 2018, D&N Solutions London is the data controller in respect of personal data collected via this website and through our consultancy engagements.

If you have any questions about this policy or wish to exercise any of your rights, please contact us using the form on our Contact page.

2. Personal Data We Collect

We collect personal data in the following ways:

2.1 Information you provide to us

• Contact form submissions: name, company name, email address, area of interest and the content of your message.
• Direct correspondence: any information you provide when you email us, meet with us or engage us for consultancy services.
• Client engagement data: during a consulting engagement, we may collect further information necessary to deliver the service — for example, business documents, financial information, HR records or operational data. This is governed by the terms of your engagement contract.

2.2 Information collected automatically

• Technical data: when you visit this website, our hosting provider may automatically record information such as your IP address, browser type, device information, referring URL and pages visited.
• Cookies and similar technologies: see our separate Cookie Policy for details.

3. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases:

• To respond to your enquiry — legal basis: legitimate interest (in responding to a request you have made) and, where relevant, steps taken at your request prior to entering into a contract.
• To deliver consultancy services under an agreed engagement — legal basis: performance of a contract.
• To send you occasional relevant business communications where you have opted in — legal basis: consent (which you may withdraw at any time).
• To comply with legal, regulatory and tax obligations applicable to us as a UK business — legal basis: legal obligation.
• To administer, maintain and improve our website and services — legal basis: legitimate interest in running our business effectively.

4. Sharing Your Personal Data

We do not sell your personal data. We only share it in the following circumstances:

• Trusted service providers who help us operate our business — for example, email and website hosting providers, form submission processors, and accounting or professional services providers. These providers act as data processors on our behalf and are bound by written agreements requiring them to protect your data.
• Professional advisors such as our lawyers and accountants, where necessary.
• Regulatory authorities or law enforcement where required by law.
• In connection with a business transaction such as a merger, acquisition or sale of assets — in which case appropriate safeguards will apply.

5. International Transfers

Where personal data is transferred outside the United Kingdom (for example, because a service provider is based abroad or uses servers overseas), we ensure that appropriate safeguards are in place, such as International Data Transfer Agreements, UK Addendums to the EU Standard Contractual Clauses, or transfers to jurisdictions covered by UK adequacy decisions.

6. How Long We Keep Your Data

We keep personal data only for as long as reasonably necessary for the purposes we collected it for, including satisfying any legal, accounting or reporting requirements. Typical retention periods are:

• Contact form enquiries: up to 24 months from the date of your last correspondence, unless a client relationship develops.
• Client engagement records: for the duration of the engagement plus a minimum of 7 years thereafter, in line with UK statutory retention requirements.
• Website technical logs: typically retained by our hosting provider for up to 90 days.

7. Your Rights

Under UK data protection law, you have the following rights in respect of your personal data:

• The right to be informed — about how we collect and use your data (this policy).
• The right of access — to request a copy of the personal data we hold about you.
• The right to rectification — to have inaccurate or incomplete data corrected.
• The right to erasure — to request deletion of your data in certain circumstances.
• The right to restrict processing — to limit how we use your data in certain circumstances.
• The right to data portability — to receive your data in a structured, commonly used format.
• The right to object — to processing based on legitimate interest or for direct marketing.
• Rights in relation to automated decision-making — we do not currently carry out automated decision-making or profiling that produces legal or similarly significant effects.
• The right to withdraw consent — where processing is based on consent.

To exercise any of these rights, please contact us via our Contact page. We will respond within one month.

8. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include encrypted data transmission, restricted access to personal data, and secure storage. No system, however, is completely secure — please contact us immediately if you believe there has been a security incident affecting your data.

9. Cookies

This website uses only essential cookies necessary for its operation. For details, please see our separate Cookie Policy.

10. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Material changes will be communicated where appropriate.

12. Contact

To contact us about anything in this policy, or to exercise any of your rights, please use the form on our Contact page or write to us at our registered office:

D&N Solutions London
18 Appold Street
London, EC2A 2AS
United Kingdom