Legal

Privacy Policy — Felicette Consultancy Limited

Last updated: [Helen to add: date of site launch]

Who we are

Felicette Consultancy Limited (“Felicette,” “we,” “us,” “our”) is an IT consultancy founded by Helen Beckford. This privacy policy explains how we collect, use, store, and protect your personal data when you use our website (felicetteconsultancy.com) and related services.

Our contact details:
Email: [email protected]
Website: felicetteconsultancy.com

What data we collect

Data collectedWhere it's collectedPurpose
NameQuiz, newsletter signup, session registration/waitlist, contact formTo personalise communications and identify you
Email addressQuiz, newsletter signup, session registration/waitlist, contact formTo send results, follow-up communications, newsletters, and respond to enquiries
Job title/roleQuiz (post-quiz), session registration/waitlistTo understand your context and tailor our communications
Company nameQuiz (post-quiz), session registration/waitlist, contact formTo understand your business context
Company size (employee count)Quiz (post-quiz)To assess relevance of our services to your business
Quiz responses and resultsQuizTo provide your personalised health check result and to improve our services
Message contentContact formTo respond to your enquiry
IP address and browser dataAutomatically via website hosting and analyticsFor website security, performance monitoring, and anonymous analytics

How we use your data

  • To provide your Priority & Governance Health Check result
  • To send follow-up communications related to your health check result, including relevant content and service information
  • To register you for upcoming live sessions of ROI: The Risk of Inaction or add you to the session waitlist
  • To send The Priority Call newsletter (only if you have explicitly opted in)
  • To respond to enquiries submitted through the contact form
  • To schedule and prepare for calls booked through our calendar
  • To improve our website, services, and understanding of the challenges facing our audience
  • To maintain records of our business relationships

Legal basis for processing

  • Consent: When you submit a form on our website (quiz, newsletter signup, session registration/waitlist), you consent to us processing your data for the stated purpose. You can withdraw consent at any time by contacting us.
  • Legitimate interest: We may send follow-up communications related to your quiz result or session attendance where we believe the content is directly relevant to the information you requested. You can opt out at any time.
  • Contractual necessity: When you engage us for consultancy services, we process data necessary to deliver those services.

How we store and protect your data

Your data is stored in the following systems:

  • Google Workspace (email and calendar) — hosted within the EEA/UK
  • Google Sheets (lead tracking) — hosted within the EEA/UK
  • Beehiiv (newsletter distribution) — hosted on Amazon Web Services (AWS) servers located within the United States
  • Zapier (workflow automation) — data passes through Zapier's servers for processing but is not stored long-term. Zapier maintains SOC 2 Type II certification

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (SSL/HTTPS), access controls, and regular review of data processing activities.

Who we share your data with

We do not sell your personal data to third parties. We share data only with the following service providers who process data on our behalf:

  • Google (Workspace, Sheets, Calendar) — for communication and scheduling
  • Zapier — for workflow automation connecting our website forms to our internal systems
  • Beehiiv — for newsletter distribution
  • Our website hosting provider — NameCheap

All service providers are bound by data processing agreements and are required to process data in accordance with applicable data protection laws.

How long we keep your data

Data typeRetention period
Quiz responses24 months from completion, then deleted unless you become a client
Newsletter subscribersUntil you unsubscribe, plus 30 days for removal processing
Session registrations and waitlist24 months from the date of registration
Contact form submissions12 months from submission
Client engagement dataDuration of engagement plus 6 years (UK legal and tax requirements)

Your rights

Under UK GDPR and equivalent data protection laws, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data (subject to legal retention requirements)
  • Right to restrict processing: Request that we limit how we use your data
  • Right to data portability: Request your data in a structured, commonly used format
  • Right to object: Object to processing based on legitimate interest
  • Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Cookies

Our website uses cookies for the following purposes:

  • Essential cookies: Required for the website to function (e.g. form submissions, session management). Cannot be disabled.
  • Analytics cookies: Used to understand how visitors use our website. We use [Dirk to confirm: analytics tool] for this purpose. These cookies are only placed with your consent.

A cookie consent banner is displayed on your first visit, allowing you to accept or decline non-essential cookies. You can change your preferences at any time through [Dirk to confirm: cookie settings mechanism].

Changes to this policy

We may update this privacy policy from time to time. The “last updated” date at the top of this page will reflect the most recent version. We encourage you to review this page periodically.

Complaints

If you have concerns about how we handle your personal data, please contact us at [email protected].

You also have the right to lodge a complaint with your local data protection authority:

  • United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
  • European Union: Your local supervisory authority — a full list is available at edpb.europa.eu
  • Other jurisdictions: Contact your national data protection authority