Who we are

This website is operated by Paul Vousden trading as Corporate Counsel. References to "we", "us" or "our" in this policy refer to Paul Vousden.

If you have any questions about how we handle your personal data, you can contact us at:

Email: Paul@corporate-counsel.co.uk

Phone: 07784 491904

What this policy covers

This policy explains how we collect, use and store personal information submitted through web forms on this website. It covers enquiry forms, contact forms and any other form through which you provide us with your details.

What data we collect

When you submit a web form on this website, we collect the information you enter — typically your name, email address, and the content of your message or enquiry.

We do not collect sensitive personal data through these forms, and we ask that you do not submit any.

Why we collect it and our lawful basis

We collect and use your personal data for two distinct purposes, each with its own lawful basis:

Responding to your enquiry

When you contact us through a web form, we use the information you submit to respond to your enquiry and manage our relationship with you. Our lawful basis for this is legitimate interests (Article 6(1)(f) UK GDPR) — specifically, our legitimate interest in communicating with people who have contacted us voluntarily. We do not consider this likely to cause you any harm, and it is proportionate to the purpose.

Marketing communications

Where you have indicated that you would like to receive updates, insights or our newsletter, we will use your email address to send you marketing communications. Our lawful basis for this is consent (Article 6(1)(a) UK GDPR). You can withdraw your consent at any time by clicking the unsubscribe link in any email we send, or by contacting us directly at Paul@corporate-counsel.co.uk.

We do not send marketing communications unless you have actively opted in.

Who we share your data with

We share your information with the following third-party service providers solely to operate this website and deliver our services. All are either UK GDPR-compliant or operate under appropriate international data transfer safeguards.

Squarespace — our website hosting provider, based in the United States. Form submission data is processed by Squarespace on our behalf as part of their hosting service. See Squarespace's Privacy Policy for further detail.

Mailchimp (Intuit Inc.) — used to store email addresses and send marketing communications where you have consented to receive them. Mailchimp is based in the United States and operates under appropriate data transfer mechanisms. See Mailchimp's Privacy Policy for further detail.

Microsoft OneDrive — used for secure document and data storage. Microsoft operates under UK GDPR-compliant data processing terms and stores data in European data centres where applicable. See Microsoft's Privacy Statement for further detail.

We do not sell your personal data. We do not share it with any third party for their own marketing purposes.

International data transfers

Squarespace and Mailchimp are based in the United States. Where your data is transferred outside the UK, we ensure this is done under appropriate safeguards in accordance with UK data protection law, including standard contractual clauses or equivalent transfer mechanisms recognised by the ICO.

How long we keep your data

We retain personal data submitted through web forms for two years from the date of your last contact with us, unless you ask us to delete it sooner or we have an ongoing business relationship that warrants longer retention.

If you have consented to marketing communications, we will retain your details on our mailing list until you unsubscribe or ask us to remove you.

Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you

Correct any inaccurate or incomplete information

Request deletion of your data (the "right to be forgotten")

Restrict how we process your data in certain circumstances

Object to processing based on legitimate interests

Withdraw consent at any time, where consent is the basis for processing

Data portability — to receive your data in a structured, commonly used format

To exercise any of these rights, please contact us at Paul@corporate-counsel.co.uk. We will respond within one calendar month.

Complaints

If you are dissatisfied with how we have handled your personal data, you have the right to complain to the UK's data protection authority:

Information Commissioner's Office (ICO)

Website: ico.org.uk

Helpline: 0303 123 1113

We would always welcome the chance to address your concern directly before you escalate to the ICO.

Changes to this policy

We may update this policy periodically. Any changes will be posted on this page with a revised date.