Privacy Policy

EVOLVE CONSULT LIMITED ("Evolve", "we", "us") is the data controller for personal data collected through this website and our services.

Company number: 05924528
Registered office: Downsview House, 141–143 Station Road East, Oxted, Surrey, RH8 0QE, United Kingdom
Privacy contact: info@evolve-consult.co.uk

We collect personal data only where we have a lawful basis to do so. The main categories are:

Strategy Sessions are covered by a separate Confidentiality Agreement accepted as part of the booking process. That agreement sets out specific obligations regarding Client Confidential Information, including:

• We will not disclose your confidential information to third parties without your consent.
• We will not use your confidential information to train, fine-tune or improve any public or third-party AI model without your explicit prior written agreement.
• We may observe general themes and patterns across our work. We may retain and use such insights in genuinely anonymised and aggregated form for internal research, service development and training — provided you and your organisation are not identifiable and no confidential information is disclosed or reasonably inferable.

A copy of the Confidentiality Agreement is available during the booking process and on request.

Cancellation and refund arrangements for Strategy Sessions are set out in our Booking Terms.

We keep personal data only for as long as necessary:

• Strategy Session briefs, working notes and session-specific materials — normally deleted or anonymised within 12 months after the session date, unless you request earlier deletion or retention is required by law.
• Booking records, signed confidentiality agreements and invoices — retained for 7 years where required for accounting or legal purposes, or for the period required by applicable law.
• Ebook download leads — retained for up to 24 months unless an active client relationship or ongoing consented marketing relationship continues beyond that period.
• Contact and enquiry records — retained for up to 24 months after the last meaningful contact, unless an active client relationship continues beyond that period.
• Genuinely anonymised or aggregated insights — not subject to the above deletion obligations as they do not constitute personal data.

To request access to, correction of, or deletion of your personal data, or to exercise any other right under UK GDPR, please contact us using the details in Section 10.

We do not sell your personal data. We may share it with:

• Service providers acting as data processors on our behalf (e.g. payment processing, email delivery, video conferencing) — bound by data processing agreements.
• Legal or regulatory authorities where required by law.

We do not transfer your personal data outside the UK/EEA unless appropriate safeguards are in place.

This website uses cookies. Some are strictly necessary for the site to function (for example, session cookies used during the booking process). Others are used only with your consent.

We currently use Airo Insights (a first-party analytics service) to understand how the site is used. This service operates under consent controls — you can accept or decline analytics cookies when you first visit the site, and change your preference at any time using the cookie settings link in the footer.

We do not currently use Google Analytics, advertising networks, retargeting pixels or other third-party tracking technologies. If this changes, this policy will be updated before any such technology is activated.

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data where there is no overriding legal basis to retain it.
• Restriction — ask us to restrict processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us using the contact details in Section 10. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Payment card data is handled by our payment provider and is not stored on our systems.

We may update this policy from time to time. Material changes will be notified on this page with an updated effective date. Continued use of our services after a change constitutes acceptance of the updated policy.

For any privacy-related queries or to exercise your rights: