Privacy Notice
Last updated: 4 August 2026
This privacy notice explains how OpCo Consulting LTD collects, uses, and protects your personal information. We are committed to data minimisation and only collect the information absolutely necessary to operate our website and provide our consulting services.
Contact Details & Controller Identity
Data Controller: OpCo Consulting LTD
Company Registration Number: 16298060
Registered Address: 6 Glynneath Road, Neath, Wales, SA11 4DP
Email: info@opcoconsulting.com
1. Website Visitors
When you visit our website or get in touch with us online, we collect minimal data to ensure the site functions and to respond to your inquiries.
What we collect and why
- Contact information: If you use our Contact Us form or book an appointment, we collect your name, email address, and any details you choose to provide in your message.
- Website user information (Cookieless Analytics): We use privacy-first, cookieless analytics (via Cloudflare) to understand how our website is performing. This records basic, anonymised usage data without tracking you across the internet or storing cookies on your device.
Our Lawful Bases
Legitimate Interests: We process your contact information and basic website usage data under legitimate interests. This allows us to respond to your B2B inquiries, manage our appointment calendar, and ensure our website functions correctly without compromising your privacy.
2. Engaged Clients
When you enter into a commercial relationship or contract with us for consulting services, we collect the necessary information to fulfill our professional obligations.
What we collect and why
- Identity and Contact details: Names, business addresses, email addresses, and occupations of key contacts within your organisation.
- Financial and Payment details: Information required for invoicing and processing offline BACS transfers or direct debits (we do not process any payments directly on our website).
- Transaction and Contract data: Records of services purchased, contracts, meeting notes, and decisions made during the course of our consulting engagement.
Our Lawful Bases
- Contract: We must collect and use this information to enter into and carry out our consulting contract with you.
- Legal Obligation: We process financial records and transaction data to comply with our statutory obligations (e.g., HMRC tax and accounting requirements).
Who We Share Information With
We do not sell your data. We only share personal information with:
- Third-party processors: We use trusted third-party service providers who act as data processors on our behalf to provide website hosting, email communications, and appointment scheduling.
- Current sub-processors: Hostinger UAB, Plus Five Five Inc, Cloudflare Inc, Cal.com Inc, and Stripe Inc.
- Regulatory authorities or legal bodies: Only when we are legally obliged to share information to comply with the law.
Information Security & Data Transfers
We store the information you provide in a controlled, secure environment, protected from unauthorised access, use, or disclosure. We apply reasonable administrative, technical, and physical safeguards to protect your personal data.
To power our website and communications efficiently, our digital infrastructure utilizes cloud servers. We ensure that any personal data processed by our third-party infrastructure providers is hosted and secured solely within the UK and the European Economic Area (EEA), ensuring it is protected under UK GDPR adequacy regulations.
How Long We Keep Information
- General Client Data: Information gathered directly for account management, active clients, and current projects will be stored securely. Once a contract or engagement concludes, standard client records will be stored for 60 months before being securely anonymised or deleted.
- Contact Data: General enquiries that do not result in a contract are deleted after 12 months.
- Financial Records: Any financial information, contracts, transaction records, or invoicing data required for legal or financial auditing purposes will be held for 6 years, in line with standard UK statutory and HMRC requirements.
Your Data Protection Rights
Under UK data protection law, you have rights regarding your personal information:
- Your right of access: You can ask us for copies of your personal information.
- Your right to rectification: You can ask us to correct or delete personal information you think is inaccurate or incomplete.
- Your right to erasure: You can ask us to delete your personal information in certain circumstances.
- Your right to restriction of processing: You can ask us to limit how we use your personal information.
- Your right to object to processing: You have the right to object to our processing of your data, particularly where we rely on legitimate interests.
- Your right to data portability: You can ask that we transfer the personal information you gave us to another organisation, or to you.
If you make a request, we have one month to respond to you. Please contact us at info@opcoconsulting.com to make a request.
How to Complain
If you have any concerns about our use of your personal data, please raise them with us directly by emailing info@opcoconsulting.com.
If you remain unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO).
The ICO's address:Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113