Privacy Policy

Who we are

White Rock Consulting Ltd is a data strategy and analytics consultancy based in Swansea, Wales. We are registered in England and Wales; our company registration details are available via Companies House.

We are the data controller for the personal data described in this policy. If you have any questions about how we handle your data, you can contact us at info@whiterockconsulting.net.

What data we collect and why

We collect personal data in the following ways:

• When you contact us directly — if you email us at info@whiterockconsulting.net, we will receive your name, email address, and any information you include in your message. We use this to respond to your enquiry and, where relevant, to manage our client relationship with you.
• Website analytics — we use Google Analytics 4 (GA4) to understand how visitors use our website. This collects data including your approximate location, device type, browser, and pages visited. This data is anonymised and aggregated. GA4 only runs with your consent, which you can provide or withdraw via the cookie banner on this site.

Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — for responding to direct enquiries and managing client relationships.
• Consent — for analytics cookies. You can withdraw this consent at any time by adjusting your cookie preferences.

How we store and protect your data

Emails and contact data are stored within our Microsoft 365 environment, which is hosted on Microsoft's secure cloud infrastructure. We do not currently use a CRM system, though we may do so in the future. If we do, this policy will be updated accordingly.

We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss, or disclosure.

How long we keep your data

We retain email correspondence for as long as it is relevant to our business relationship with you, and for up to three years after our last contact. Analytics data is retained in line with Google Analytics default settings.

Sharing your data

We do not sell, rent, or trade your personal data. We may share data with the following third parties solely to operate our business:

• Microsoft 365 — for email and document storage.
• Google Analytics — for anonymised website analytics, subject to your cookie consent.

Both providers operate under appropriate data processing agreements and comply with UK GDPR requirements.

Cookies

Our website uses cookies for analytics purposes only. We use Google Analytics 4, which sets cookies to help us understand how visitors interact with the site. These cookies are only placed with your explicit consent.

You can manage your cookie preferences at any time using the cookie settings banner on this site. You can also control cookies through your browser settings.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• The right to access the personal data we hold about you.
• The right to have inaccurate data corrected.
• The right to have your data deleted, where we have no legitimate reason to continue holding it.
• The right to restrict or object to our processing of your data.
• The right to withdraw consent for analytics cookies at any time.
• The right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at info@whiterockconsulting.net. We will respond within 30 days.

Changes to this policy

We may update this policy from time to time. Any significant changes will be reflected in the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact

If you have any questions or concerns about this privacy policy or how we handle your data, please contact us at info@whiterockconsulting.net.