Privacy policy

MD Business Consultancy Ltd is a private limited company registered in England and Wales (company no. 17347175), with its registered office at 25 North Moor Avenue, Durham, TS29 6AG, operating throughout the UK. MD Business Consultancy Ltd is the data controller for any personal information collected through this website, and Jemma Morgan-Dodds, Director, is your point of contact for anything in this policy.

You can reach me at jemma@mdbusinessconsultancy.co.uk or on +44 (0)7741 525035.

I only collect what I need in order to reply to you or deliver something you have asked for:

I do not collect special category data through this website, and I do not ask for financial account details by email or form.

• To reply to enquiries and hold discovery calls — legitimate interests, so that I can respond to someone who has approached me.
• To deliver work and resources you have paid for — performance of a contract.
• To send the free checklist and marketing updates — consent, which you give by ticking the box and can withdraw at any time.
• To meet accounting and tax obligations — legal obligation.

I do not sell your information, and I do not use it for automated decision-making or profiling.

I use a small number of third-party services to run the business. Each only receives what it needs to do its job:

Some of these providers may process data outside the UK. Where that happens, appropriate safeguards such as UK adequacy regulations or standard contractual clauses apply.

I may introduce new third-party services from time to time to improve how the business operates. Any such services will be chosen with data protection in mind, and this policy will be updated accordingly. Material changes affecting people already on the mailing list will be notified by email.

This website does not use analytics or advertising cookies. The sign-up forms (MailerLite) and the booking calendar (Cal.com) are loaded from those providers, and may store small amounts of information in your browser that they need in order to work. If analytics or marketing cookies are added in future, you will be asked to consent before any non-essential cookie is set.

Third-party pages you are taken to, such as the booking page, the resource storefront or a course ticketing page, set their own cookies and are governed by their own policies.

• Enquiries that do not become work: up to two years, then deleted.
• Client records: for the duration of our work together, and six years afterwards to meet HMRC requirements.
• Mailing list: until you unsubscribe, or after two years of no engagement.

Information is held on password-protected, access-controlled systems, and only I have access to it.

Under UK GDPR you have the right to:

Email me and I will respond within one month. If you are not happy with how I have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

If this policy changes, the updated version will be posted here with a new date. Material changes affecting people already on the mailing list will be notified by email.