Last updated: 20 October 2026
This privacy policy explains how RegConsult Limited ("we", "us", "our") collects, uses and protects personal information when you visit www.regconsult.co, contact us or book a meeting.
We are committed to handling your information fairly, securely and transparently.
1. Who we are
RegConsult Limited is the data controller for the personal information covered by this policy.
- Business name: RegConsult Limited
- Legal structure: Limited company registered in England and Wales
- Company number: 10630227
- Registered office: 58 St. Mildreds Road, Westgate-on-Sea, Kent, CT8 8RF, England
- Email: enquiries@regconsult.co
- ICO registration number: ZC230239
Privacy enquiries should be addressed to the Managing Director. Personal information processed solely on a client's instructions is covered by the client's privacy information and our agreed arrangements.
2. What personal data we collect
- Contact and enquiry information: your name, work email, company, message and any other details you provide, such as telephone number, services required, markets and timing.
- Booking information: your name, email, meeting time and answers provided when booking through Calendly.
- Technical information: IP addresses, browser or device information, requested pages, timestamps and security or error logs.
- Website usage information: where you consent to Google Analytics 4, information about pages viewed, referral sources, approximate location, browser and device characteristics, and cookie-generated identifiers. These identifiers do not directly name you but may constitute personal data. We do not send enquiry-form messages, names or email addresses to Google Analytics.
Please do not include patient information or other sensitive personal information in an initial enquiry.
3. How we collect your data
We collect information when you submit an enquiry, email or call us, book a meeting or correspond with us. We may also receive your business contact details from a colleague introducing you or including you in a business discussion.
With your consent, Google Analytics 4 automatically collects website usage information through cookies and the Google analytics script. We do not load that script before you accept analytics. See section 9 for details and how to change your choice.
4. How we use your data
| Purpose | Lawful basis |
|---|---|
| Respond to enquiries, arrange meetings and manage business leads | Legitimate interests in responding to requests and developing business relationships |
| Provide services and manage client relationships | Contract where you personally enter into a contract with us; otherwise legitimate interests in managing relationships with our business clients |
| Operate, protect and troubleshoot the website | Legitimate interests in providing a reliable and secure service |
| Understand website use and improve its content | Consent. You can refuse analytics or withdraw your consent at any time through Cookie settings without affecting your use of the website. |
| Meet legal duties and deal with legal claims | Legal obligation, or legitimate interests in establishing, exercising or defending legal claims, as applicable |
Contacting us or booking a meeting does not automatically add you to a marketing mailing list. Required enquiry fields help us understand and respond to your request; without sufficient information, we may be unable to do so.
We do not make solely automated decisions about you that have legal or similarly significant effects.
5. Who we share your data with
Access within RegConsult is limited to the Managing Director and authorised people working under their direction who need the information for their work. We use:
- Fasthosts: website hosting and associated technical services.
- Microsoft 365: receiving, storing and responding to website enquiries and for business email and calendar services.
- HubSpot: managing business leads using the relevant details supplied to us.
- Calendly: arranging meetings through RegConsult's account and the Managing Director's calendar. We do not record or transcribe these meetings.
- Google Analytics 4: Google processes website usage information to provide statistics about visits and help us improve our website. Analytics is enabled only with your consent. Further information is available in Google's privacy policy.
Providers process information under their applicable contractual and privacy arrangements. Calendly's booking service has its own privacy notice.
We may also share necessary information with professional advisers, insurers or authorities where required by law or needed for advice or legal claims. We do not sell your personal data.
6. International transfers
Some of our service providers process information outside the UK, including in the United States. Where required, transfers are covered by UK adequacy arrangements or appropriate contractual safeguards.
For Google Analytics, Google’s transfer arrangements include the UK Extension to the EU–US Data Privacy Framework for qualifying transfers to certified US organisations, and standard contractual clauses with the applicable UK safeguards where required.
Further information is available in Google’s information about international data transfers. You can also contact us for information about the safeguards relevant to our services.
7. How long we keep your data
We keep information only as long as needed for its purpose. Our normal retention periods are:
- Enquiries, meeting bookings and leads that do not become client work: up to two years after the last substantive contact.
- Necessary client administration and contractual records: for the relationship and normally six years afterwards.
- Website analytics: Google Analytics is configured with a two-month retention period for user-level and event-level data, without resetting user retention when someone returns. Eligible data is removed through Google’s monthly deletion process. Standard aggregated reports are outside that setting and may remain available for longer. We periodically review whether those reports remain necessary for understanding and improving our website.
- Website access, security and form-protection records: Up to 2 years.
- Backup copies: Up to 2 years.
Different periods may apply where required by law, a project agreement, regulatory record requirements or an ongoing dispute. We delete or anonymise information when it is no longer needed.
8. Your rights
Depending on the circumstances, you can ask to access, correct or erase your personal information, restrict its use, or receive certain information in a portable format.
You can object to processing based on legitimate interests. You also have an absolute right to object to direct marketing. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.
To exercise your rights, email enquiries@regconsult.co. Requests are normally free and answered within one calendar month. We may need to verify your identity and will explain any lawful extension or exception.
We use appropriate technical and organisational measures to protect personal information and restrict access to those who need it.
9. Cookies and similar technologies
Cookies are small files stored on your device. Similar technologies, including local storage, can remember information in your browser.
Our core website pages and enquiry form do not require tracking cookies. Images and fonts are served with the website.
With your consent, we use Google Analytics 4 to understand visits and improve our website. We do not load the Google analytics script before you accept. You can reject analytics and continue using the website normally.
Google Analytics uses cookies named "_ga" and "_ga_<identifier>". These help distinguish visitors and maintain session information. We configure their expiry to a maximum of 180 days without extending it on each visit. We do not enable Google Signals or advertising personalisation.
We use local storage under a name beginning regconsult_privacy_v1 to remember your analytics choice, the notice version and when you made that choice. This preference is valid for 180 days. An expired preference is removed when you next visit, and we request a fresh choice. You can also clear it through your browser settings.
You can review or withdraw consent at any time using Cookie settings in the footer. Withdrawal stops subsequent analytics measurement and removes the analytics cookies our website can access. It does not retrospectively delete information already collected.
The meeting-booking link opens Calendly as a separate website. Calendly’s own privacy and cookie information applies there.
For information about Google’s handling of data, see Google's privacy policy. International transfers and analytics retention are explained in sections 6 and 7 above.
10. Complaints
If you are concerned about how we handle your personal information, contact enquiries@regconsult.co. We will acknowledge your complaint within 30 days, investigate and respond without undue delay.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We may update this policy as our practices change. The current version and its last-updated date will appear on this page. Where necessary, we will bring significant changes to your attention.