← Back to Home

Privacy Policy

Last updated: January 2025

1. Introduction

Global Unison Consulting Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services.

This policy applies to all personal data processing activities carried out by Global Unison Consulting Ltd in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

3. Information We Collect

3.1 Information You Provide to Us

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Job title, company name, industry sector
• Inquiry Details: Information about your compliance and risk management needs
• Communication Records: Records of correspondence and meeting notes
• Service Delivery Information: Information necessary to provide our consulting services

3.2 Information We Collect Automatically

• Website Usage Data: IP address, browser type, pages visited, time spent on site
• Device Information: Device type, operating system, unique device identifiers
• Cookies and Tracking: As described in our Cookies Policy

4. How We Use Your Information

4.1 Legal Basis for Processing

We process your personal data under the following legal bases:

• Legitimate Interests: For business development, marketing, and improving our services
• Contract Performance: To provide our consulting services and fulfill contractual obligations
• Consent: Where you have given specific consent for certain processing activities
• Legal Obligation: To comply with legal and regulatory requirements

4.2 Purposes of Processing

• Providing risk and compliance consulting services
• Responding to inquiries and providing information about our services
• Managing client relationships and service delivery
• Marketing our services (with appropriate consent)
• Improving our website and user experience
• Complying with legal and regulatory obligations
• Protecting our business interests and preventing fraud

5. Information Sharing and Disclosure

5.1 We May Share Your Information With:

• Service Providers: Third-party vendors who assist with our business operations
• Professional Advisors: Lawyers, accountants, and other professional service providers
• Regulatory Bodies: When required by law or regulation
• Business Partners: With your consent, for joint service delivery

5.2 We Do Not:

• Sell your personal data to third parties
• Share your information for marketing purposes without your consent
• Transfer data outside the UK/EEA without appropriate safeguards

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection requirements
• Secure disposal of personal data when no longer needed

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law:

• Client Records: 7 years after end of engagement (regulatory requirement)
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months (Google Analytics default)
• Inquiry Records: 2 years if no engagement follows

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

8.1 Right of Access

You can request copies of your personal data we hold.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You can request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

You can request limitation of how we process your personal data.

8.5 Right to Data Portability

You can request transfer of your personal data to another organization.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

9. Cookies and Tracking

Our website uses cookies and similar technologies. For detailed information about our use of cookies, please see our Cookies Policy.

10. International Transfers

We primarily process data within the UK. If we need to transfer your personal data outside the UK/EEA, we will ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard Contractual Clauses
• Binding Corporate Rules
• Certification schemes

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

12. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: www.ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post any updates on this page and indicate the date of the last revision. If we make material changes, we will provide additional notice as appropriate.

14. Legal Framework

This Privacy Policy and our data processing activities are governed by:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations 2003
• Other applicable UK data protection laws