Privacy Policy

1. Who we are

This website is operated by Optimus Consulting (North West) Limited ("Optimus", "we", "us", "our"), a company registered in England and Wales.

• Companies House number: 13718490
• ICO registration number: ZB883931
• Registered office: Crewe, United Kingdom
• Data protection contact: chris@optimus-consulting.co.uk

Optimus is the data controller for personal data collected through this website and during our consulting engagements.

2. What data we collect

• Contact form data: name, business email, company, sector and the message you send us.
• Email correspondence: any information you choose to share when you email or call us.
• Engagement data: notes, documents and operational data you share during a consulting project.
• Technical data: anonymised, cookieless analytics (page views, referrer, approximate location). We do not set marketing or advertising cookies.

3. Lawful basis (UK GDPR Article 6)

• Legitimate interests — to respond to enquiries, deliver consulting services and run our business.
• Contract — to perform a consulting agreement with you or your organisation.
• Legal obligation — to keep records required by HMRC, Companies House and applicable regulators.
• Consent — for any optional marketing communications. You can withdraw consent at any time.

4. How we use your data

• To reply to enquiries submitted via our contact form.
• To scope, deliver and invoice consulting work.
• To send service-related updates relating to active engagements.
• To improve the website using anonymised analytics.
• To meet legal, tax and regulatory obligations.

We do not sell your data, share it with advertising networks, or use it to train third-party AI models.

5. Sub-processors and third parties

We use a small number of vetted service providers to operate our website and deliver our services. A full, current list is available on our How We Handle Your Data page.

6. International transfers

Some of our providers (including AI model providers and email infrastructure) are based in the United States or process data outside the UK. Where this happens, transfers are protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the provider's UK Extension to the EU-US Data Privacy Framework.

7. How long we keep data

• Contact enquiries: up to 24 months from last contact.
• Active client records and correspondence: for the duration of the engagement plus 6 years (to meet HMRC requirements).
• Analytics: aggregated and anonymised, retained up to 14 months.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted transport (HTTPS), access controls, multi-factor authentication on key systems, and least-privilege access for sub-processors. No system is 100% secure, but we work to industry good practice and review our controls regularly.

9. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure ("right to be forgotten") where applicable.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time, where consent is the lawful basis.

To exercise any of these rights, email chris@optimus-consulting.co.uk. We will respond within one calendar month.

10. Right to complain

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, by phone on 0303 123 1113, or by post to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

11. Cookies

See our Cookie Policy for details of the limited, essential cookies used on this site.

12. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The "Last updated" date at the top of this page will always show the current version.