Privacy policy

Privacy Policy

Last updated: 5 October 2026

Northlight Consultancy Ltd respects your privacy and is committed to protecting your personal information.

This privacy policy explains what information we may collect about you, how we use it and the rights you have in relation to your personal data.

Who we are

Northlight Consultancy Ltd is a company registered in England and Wales.

Company number: 17358115
Registered office: 20 Pendragon Park, BA6 9PQ
Email: hello@northlightconsultancy.co.uk

Northlight Consultancy Ltd is the data controller for the personal information described in this policy.

Information we may collect

We may collect personal information when you contact us or work with us.

This may include:

  • your name

  • your email address

  • your telephone number, if you choose to provide it

  • your organisation and role

  • information contained within an enquiry or correspondence

  • information you provide while discussing or delivering work with Northlight

  • billing, invoicing and transaction information where you become a client

We only collect information that is relevant to providing our services, responding to enquiries or running Northlight Consultancy.

Discovery call enquiries

The Book a discovery call links on this website opens an email addressed to Northlight Consultancy.

Clicking the link does not automatically send us your personal information. Information is only received by Northlight when you choose to compose and send an email.

We will use the information contained within your email to respond to your enquiry, understand what support you may need and, where appropriate, discuss providing services to your organisation.

How we use your information

We may use your personal information to:

  • respond to enquiries and correspondence

  • arrange initial conversations or meetings

  • provide information about our services

  • prepare proposals or quotations

  • deliver consultancy services where you become a client

  • manage our relationship with clients

  • issue invoices and maintain appropriate business and financial records

  • comply with legal and regulatory requirements

  • manage and improve the operation of Northlight Consultancy

We do not sell your personal information.

Our lawful basis for using your information

Depending on the circumstances, we process personal information on one or more of the following grounds:

Steps before entering into a contract
Where you contact us about potentially working together, we may process your information in order to respond to your enquiry, discuss your requirements and prepare a proposal.

Contract
Where you become a client, we may use your information where necessary to provide the services you have asked us to deliver.

Legitimate interests
We may process information where reasonably necessary to operate and manage Northlight Consultancy, communicate with organisations and individuals, respond to enquiries and maintain appropriate business relationships, provided that those interests do not override your rights and freedoms.

Legal obligations
We may process and retain information where required to comply with tax, accounting or other legal obligations.

UK data protection law requires organisations to identify an appropriate lawful basis for their processing, and where legitimate interests are relied upon, to explain those interests. ICO

Website information and cookies

This website is hosted by Squarespace.

Squarespace may process technical information required to securely provide and operate the website. This can include information such as your browser, device, IP address and activity on the site.

The website also uses cookies. Some cookies are necessary for the website to operate correctly. Where optional analytics or performance cookies are enabled, these will only be used in accordance with the choices you make through our cookie controls.

You can review or change your choices using the Cookie Preferences link on the website.

Further information is available in our Cookie Policy.

Squarespace distinguishes between required cookies needed to operate a site and optional analytics/performance cookies, depending on the site's cookie settings. Squarespace Help

Who we may share information with

We may use trusted third-party service providers to help operate Northlight Consultancy. These may include:

  • our website hosting provider

  • email and IT service providers

  • accounting or professional advisers

  • organisations or authorities where disclosure is legally required

We only share personal information where necessary and appropriate.

Some technology providers may process information outside the UK. Where this happens, we take reasonable steps to ensure that appropriate safeguards recognised under UK data protection law are in place.

How long we keep your information

We do not keep personal information for longer than we reasonably need it.

As a general guide:

  • enquiries that do not result in work may normally be retained for up to two years after our last contact

  • client information may be retained for the duration of our relationship and afterwards where reasonably required for contractual, insurance, legal or business purposes

  • accounting and financial records will normally be retained for at least six years where required for tax and accounting purposes

UK government guidance requires limited companies to keep certain tax and accounting records for six years from the end of the relevant financial year. GOV.UK

Information may be retained for longer where there is a legitimate legal, regulatory or contractual reason to do so.

Keeping your information secure

We take reasonable steps to protect the personal information we hold against loss, misuse, unauthorised access, alteration or disclosure.

However, no method of communicating or storing information electronically can be guaranteed to be completely secure.

Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

  • ask for a copy of the personal information we hold about you

  • ask us to correct inaccurate or incomplete information

  • ask us to delete your personal information

  • ask us to restrict how your information is used

  • object to certain uses of your information

  • request transfer of your information where applicable

If you would like to exercise any of these rights, please contact:

hello@northlightconsultancy.co.uk

The ICO identifies these rights as part of the information organisations should make available to individuals. ICO

Complaints

If you have any concerns about how Northlight Consultancy uses your personal information, please contact us first and we will try to resolve the issue.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator. ICO

Changes to this privacy policy

We may update this policy occasionally to reflect changes to our services, website or legal obligations.

The latest version will always be published on this page and the date at the top will show when it was last updated.