Privacy policy

This privacy policy explains how BS Consult Ltd, trading as BS Consulting, collects and uses personal information.

Last updated: 12 August 2026

Who is responsible for your information?

BS Consult Ltd (registered in England and Wales under company number 12932128), trading as BS Consulting, is the controller of the personal information described in this policy. In this policy, “we”, “us” and “our” mean BS Consult Ltd.

If you have a question about this policy or want to exercise a data protection right, email hello@benspector.uk.

Information we collect

We may collect and use:

• Contact and business information, such as your name, business email address, telephone number, organisation and role.
• Enquiry and meeting information, including messages, meeting details and any optional notes you submit through the contact form or meeting scheduler.
• Client and project information, including correspondence, proposals, contracts, project notes, records of services, invoices and payment status. We do not ask you to provide payment-card details through this website.
• Website and device information, such as IP address, browser and device type, pages viewed, referring page, approximate location derived from an IP address, and cookie or consent choices.
• Marketing preferences, including whether you have asked to receive or stop receiving marketing.

Please do not use a website form to send special-category information, confidential credentials, passwords or information about another person unless it is necessary and you are authorised to provide it.

How we obtain information

We usually receive information directly from you when you contact us, book a meeting, become a client, correspond with us or use this website. We may also receive business contact information from a colleague who introduces you, a referral partner, or a publicly available professional or business source. If information is obtained from another source, we will provide privacy information when required by law.

How and why we use information

Where we rely on legitimate interests, those interests include running and developing the consultancy, responding to business contacts, keeping appropriate records, securing systems and understanding whether the website is useful. We consider the effect on your rights and do not rely on this basis where your interests override ours.

You may opt out of marketing at any time by using the unsubscribe method in a message or emailing hello@benspector.uk. Service messages about an enquiry, meeting or client engagement are not marketing.

Cookies and website analytics

The website uses essential technologies needed to provide the site, remember your privacy choices and maintain security. It may also use optional analytics technologies, including Google Analytics, if you consent.

The cookie banner lets you accept, reject or manage optional categories. You can change or withdraw your choice using the cookie-settings control on the website. Withdrawing consent does not affect processing that took place before withdrawal. You can also restrict cookies through your browser, although parts of the site may not work as intended.

Cookie names, providers, purposes and durations can change when services are updated. The cookie banner and its preference panel provide the current details for technologies detected on this website.

Who receives information?

We do not sell personal information. We disclose it only where needed to operate the business, provide services or comply with law. Recipients may include:

• HubSpot, which hosts this website and provides forms, meeting scheduling, consent management and customer relationship management services.
• Google, which provides Google Analytics when you consent to analytics.
• Microsoft, which provides email, calendar and Microsoft Teams meeting services.
• Other IT, hosting, security, accounting and professional-service providers acting under appropriate obligations.
• Professional advisers, insurers, courts, regulators, law-enforcement bodies or public authorities where disclosure is necessary and lawful.
• A purchaser or successor if the business or its assets are reorganised or transferred, subject to appropriate confidentiality and legal safeguards.

Some client projects involve access to a client's systems or personal information. Those arrangements are governed separately by the relevant contract and, where applicable, data-processing terms.

International transfers

Some suppliers may process information outside the United Kingdom. Where UK data protection law requires a safeguard, we use an applicable adequacy regulation or contractual safeguard, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, together with any required assessment and supplementary measures. You may contact us for more information about the safeguard relevant to your information.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements. In general:

• Enquiry and meeting records are normally kept for up to 24 months after the last meaningful contact, unless they become part of a client relationship or there is a reason to keep them longer.
• Client, contract, project, invoice and core correspondence records are normally kept for the client relationship and up to seven years afterwards.
• Marketing information is kept until you opt out or it is no longer useful. A minimal suppression record may be retained so that an opt-out is respected.
• Website security logs, consent records and analytics data are retained according to the configured period and the needs of security, compliance and reporting. Analytics reporting may retain aggregated information that no longer identifies an individual.

We may keep information for longer where required by law, where a dispute or claim is reasonably anticipated, or where you ask us to retain it.

How we protect information

We use proportionate technical and organisational measures intended to protect personal information against loss, misuse and unauthorised access, alteration or disclosure. No internet service is completely secure, so please use appropriate care when deciding what to send electronically.

Your data protection rights

Depending on the circumstances, you may have the right to:

• ask for access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for information to be erased;
• ask for processing to be restricted;
• object to processing based on legitimate interests, including direct marketing;
• receive certain information in a portable format; and
• withdraw consent at any time where processing is based on consent.

These rights are not absolute and exemptions may apply. We may need to verify your identity before acting on a request. We normally respond within one month, as required by UK data protection law.

We do not use the personal information described in this policy to make solely automated decisions that have legal or similarly significant effects.

How to complain

Please email hello@benspector.uk first if you have a concern so we can try to resolve it.

You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator. See how to make a data protection complaint to the ICO.

Changes to this policy

We may update this policy when the website, services, suppliers or legal requirements change. The latest version will be published on this page with its updated date.