Privacy notice

Introduction

This privacy notice lets you know how I collect, process and store personal data as an independent equality, diversity and inclusion (EDI) and people consultant. This document applies to any future, current, or former client of Rob Drury Consulting.

Details

Rob Drury Consulting, operated by Rob Drury. 

Email: hello@robdruryconsulting.co.uk 

Personal information

I currently collect and process the following information: 

  • Personal identifiers, contacts and characteristics (for example, name and contact details) 

  • Relevant information from clients in relation to our contractual agreement (for example, quantitative staff data including special category data, policies, emails, etc.)

How data is accessed, and why 

The majority of the personal data I process is provided to Rob Drury Consulting directly by you for one of the following reasons: 

  • You are interested in engaging my services 

  • You have engaged my services and have shared relevant information with me 

I use the information that you provide in order to complete my responsibilities to you as part of our agreement. This might be to provide you with communication about the project we are working on, or to use the data for an agreed purpose. 

I will not share the data you provide with a third-party organisation or individual, without your express written consent.  

Under the UK General Data Protection Regulation (GDPR), the lawful bases I rely on for processing this information are: 

  • Your consent; for example, if you sign up to a mailing list or agree that I may contact you for marketing purposes. You are able to remove your consent at any time by contacting me at hello@robdruryconsulting.co.uk.

  • We have a contractual obligation, for example, I am working with you as a client on a project and require information from you for the purpose of meeting our contractual obligations.  

  • I have a legitimate interest, including for marketing and networking purposes, improving my services and protecting my work against risk.

How data is stored 

Your information is securely stored when working with me. I use Microsoft 365 to hold all data related to Rob Drury Consulting in the cloud, which is protected by multi-factor authentication. No data is ever downloaded to a device and stored.  

I keep personal identifiers and contacts for six years. I will then dispose of your data by removing it from the Rob Drury Consulting Microsoft 365 account.  

I keep relevant information from clients in relation to our contractual agreement for 30 days after the project/agreement has ended. I will then dispose of your data by removing it from the Rob Drury Consulting Microsoft 365 account. 

 

 

Your data protection rights 

Under data protection law, you have rights including: 

  • Your right of access - you have the right to ask us for copies of your personal information 

  • Your right to rectification - you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete 

  • Your right to erasure - you have the right to ask us to erase your personal information in certain circumstances 

  • Your right to restriction of processing - you have the right to ask us to restrict the processing of your personal information in certain circumstances 

  • Your right to object to processing - you have the right to object to the processing of your personal information in certain circumstances 

  • Your right to data portability - you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances 

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. 

Please contact me at hello@robdruryconsulting.co.uk if you would like to make a request. 

 

 

Complaints 

If you have any concerns about my use of your personal information, you can make a complaint by emailing me at hello@robdruryconsulting.co.uk. 

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data. 

The ICO’s address: 

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

Helpline number: 0303 123 1113