Privacy Policy
Last updated: 9 October 2026
www.acp-consultants.com (the “Site”) is owned and operated by ACP Consultants Ltd. ACP Consultants Ltd. is the data controller and can be contacted at:
it@acp-consultants.com 0330 236 7329
White Collar Factory, Floor 1, 1 Old Street Yard, London, England, EC1Y 8AF
Purpose
The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:
1. The personal data we will collect;
2. Use of collected data;
3. Who has access to the data collected;
4. The rights of Site users; and
5. The Site’s cookie policy.
This Privacy Policy applies in addition to the terms and conditions of our Site.
GDPR
Our handling of personal data is subject to the UK GDPR and the Data Protection Act 2018, as amended. This notice explains relevant processing and rights; it does not treat visiting the website as consent to every use of personal data.
Consent
Reading or using this website does not itself constitute consent to personal-data processing or optional tracking.
When the legal basis for us processing your personal data is that you have provided your consent to that processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make processing which we completed before you withdrew your consent unlawful.
You can withdraw your consent by contacting us on it@acp-consultants.com.
Legal Basis for Processing
We use an applicable lawful basis for each purpose. For an individual’s enquiry about an appointment, taking steps at their request before a contract may apply. For business representatives, our legitimate interests in responding to enquiries and managing business relationships generally apply. Legal obligations apply to records required by tax and accounting law. Consent applies where required for optional analytics and advertising technology.
Personal Data We Collect
Enquiries may include your name, email address, telephone number, requested service, message, site address and project details or documents you provide. Relevant project correspondence and administration may include client and site contacts, instruction details and invoice information.
Website technology may process your IP address, approximate location, device and browser details, referring source, pages viewed and interactions. CookieYes may process consent choices and associated technical information. The information collected depends on the service, configuration and your choices.
Please provide only information relevant to your enquiry and that you are entitled to share. Avoid sending sensitive personal information through a general enquiry form unless an appropriate process has been agreed.
We do not operate a newsletter subscription service, hold newsletter subscriber records or send marketing emails. We use Google Ads to promote our services.
How We Use Personal Data
We use enquiry and project information to understand your requirements, respond, prepare proposals, deliver agreed services and maintain relevant correspondence. We use administrative records for invoicing, accounting and meeting applicable legal requirements.
Technical information may be used to operate and secure the website, measure its use and support advertising and conversion measurement, subject to applicable consent requirements. Relevant records may also be needed to address complaints or establish, exercise or defend legal claims.
Who We Share Personal Data With
ACP employees are based in the UK. Relevant authorised personnel use information needed for their work. We store business files in OneDrive for Business within Microsoft 365.
Our website is hosted on a London-based VPS, as confirmed by ACP. Website and business technology includes Bluehost hosting, WordPress and Elementor enquiry storage, Google/Gmail email delivery through WP Mail SMTP, Google tag management and advertising, Google Maps and reCAPTCHA, and CookieYes consent management. Relevant information may be processed by these providers when their services are used. Their roles and data handling depend on the service and configuration.
Relevant information may also be disclosed where required by law, for legal proceedings or to establish, exercise or defend legal rights. External links take you to websites with their own privacy information.
How Long We Store Personal Data
Enquiries that do not become projects: we retain the relevant enquiry information for 12 months after the last meaningful contact, unless a complaint, dispute or other specific legal requirement justifies longer retention.
Invoices and accounting records: we generally keep these for six years from the end of the company financial year they relate to. We retain them longer where the applicable tax or accounting rules require it, including relevant enquiries or records spanning more than one accounting period.
Accepted proposals, reports, relevant project correspondence and supporting survey evidence: we review retention six years after project completion. This is a review point, not an automatic deletion deadline. We consider the appointment terms, professional indemnity insurance requirements, applicable claim periods and any continuing project need before deciding whether the records should be deleted or retained longer. Some appointments and claims require longer retention.
Complaints, disputes, investigations and legal holds: we retain relevant records until the matter is resolved and any applicable legal, contractual or insurance retention requirement has ended. We do not delete relevant evidence while it is needed for such a matter.
We keep only information necessary for the relevant purpose. When information is no longer required, it is deleted or irreversibly anonymised. The same purpose-based criteria apply to relevant WordPress enquiry submissions and emails; archiving a record does not itself remove it from these requirements.
We do not hold newsletter subscriber records or send marketing emails.
How We Protect Your Personal Data
We are required to use appropriate technical and organisational measures proportionate to the risks. Information sent over the internet cannot be guaranteed to be risk-free.
While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.
Your Rights as a User
Depending on the processing and lawful basis, you may request access, correction, erasure, restriction or portability of your personal information. These rights are subject to the conditions and exceptions in data-protection law.
Your right to object: You can object to processing based on legitimate interests on grounds relating to your circumstances. You can object to direct marketing at any time, including related profiling. Contact it@acp-consultants.com.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal. Use Cookie settings for website preferences or contact us about other consent-based processing.
Children
This website is intended for people seeking professional consultancy services. It is not directed at children. Please contact us if you believe a child’s personal information has been provided and requires attention.
Privacy requests
Send privacy requests to it@acp-consultants.com or write to our address above. We may need proportionate information to verify your identity or clarify a request. Applicable statutory response periods, normally one month, apply, together with any lawful extension or pause. Requests are normally free of charge, subject to the legal conditions for a permitted charge or refusal.
Cookie Policy
Cookies and similar technologies can store or access information on your device. Some support website operation; others support optional features, analytics or advertising.
CookieYes provides our consent interface. Use “Cookie settings” in the footer or the consent preferences control to review the listed cookies and change your choices. You can also manage stored cookies through your browser. Cookie expiry and a provider’s retention of information are different matters.
Google Maps and reCAPTCHA are used on the contact page, and a YouTube video is configured on the tree-survey page. These services may receive technical information when they load. Their own privacy information applies to processing they carry out for their purposes.
Modifications
This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the “Effective Date” at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.
Complaints
Please contact it@acp-consultants.com if you have a concern about our use of personal information. You may also complain to the Information Commissioner’s Office, the UK supervisory authority. ICO telephone: 0303 123 1113. Contacting ACP does not remove your right to complain to the ICO.
Contact Information
If you have any questions, concerns or complaints, you can contact, ACP Consultants Ltd., at:
it@acp-consultants.com