Privacy Policy

Last updated : 31st August 2026

1. Who we are

This privacy notice explains how Alex Goodman, a sole trader trading as GDPR Consultant (“we”, “us”, “our”), collects and uses your personal data when you visit gdprconsultant.co.uk, contact us, or use our services. We are the data controller responsible for your personal data.

If you have any questions about this notice or about how we handle your personal data, you can use the contact us page to reach us.

We are registered with the Information Commissioner’s Office (ICO) under registration number ZC234243

2. The personal data we collect

2.1 Information you give us

Enquiry form. When you complete our enquiry form we collect your first name, last name, phone number and email address, together with anything else you choose to include. If you tick the relevant box, we also record your consent to receive text messages from us.
Booking a consultation. When you book a call through our online calendar we collect your first name, last name, email address, phone number, any additional information you add for the meeting and, if you tick the relevant box, your consent to receive content from us.
Live chat. If you use the chat feature on our site, we collect the messages you send and any information you choose to include in them. Your messages may be processed by an automated system, which may involve a third-party artificial intelligence provider, in order to generate responses. Please do not enter sensitive personal information into the chat.
Direct contact. If you email us, we collect the content of your message and your contact details.

2.2 Information we collect automatically

When you visit our site we may collect limited technical and usage information, such as your device and browser type, approximate location and the pages you view. Where this involves analytics cookies, we only collect it after you give consent through our cookie banner. Please see our Cookie Policy for more detail.

Our site loads fonts from Google. When it does, your device’s IP address is shared with Google in order to deliver those fonts. This happens as a normal part of your browser loading the page.

2.3 Providing your data

Providing your personal data is voluntary. We need your name and contact details to respond to your enquiry and to provide our services, and if you do not provide them we will not be able to do so. Agreeing to receive text messages, or to receive content from us, is optional, and you can contact us and use our services without agreeing to either.

3. How we use your personal data, and our lawful basis

We use your personal data for the following purposes, relying on the lawful bases shown.

To respond to your enquiry, arrange and provide your free consultation, and discuss our services. Lawful basis: our legitimate interests in responding to people who contact us, and taking steps at your request before entering into a contract.
To provide our services once you become a client. Lawful basis: performance of our contract with you.
To send you text messages, where you have asked us to. Lawful basis: your consent.
To send you content or updates about our services, where you have asked us to. Lawful basis: your consent.
To measure and improve how our site performs, using analytics. Lawful basis: your consent.
To meet our legal, accounting and tax obligations. Lawful basis: compliance with a legal obligation.
To establish, exercise or defend legal claims. Lawful basis: our legitimate interests in protecting our business.

Where we rely on your consent, you can withdraw it at any time by contacting us or, for text messages and marketing content, by using the opt out method we provide. Withdrawing your consent does not affect any processing we carried out before you withdrew it.

We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Who we share your personal data with

We do not sell your personal data. We share it only with service providers who help us run our business and who process it on our instructions under a contract. These include:

GoHighLevel (HighLevel Inc), which provides our website hosting, forms, calendar, live chat and customer relationship management system.
Aware Digital Services, which builds and maintains our website and has access to our systems in order to support us.
Microsoft, which provides our email service (Microsoft 365).
Google, which provides our website analytics and the fonts used on our site.

We may also disclose your personal data where we are required to do so by law, or where necessary to protect our rights.

5. International transfers of your data

5.1 In some cases your personal data is transferred to, stored in, or accessed from outside the UK.

5.2 Some of the service providers we rely on are based in, or store data in, the United States, in particular our website platform, hosting, email and analytics providers.

5.3 Your personal data may also be transferred to, or accessed from, other countries outside the UK, including Thailand.

5.4 Whenever your personal data is transferred outside the UK, we make sure it receives a similar degree of protection, and, where required, we ensure that at least one of the following safeguards is in place:

5.4.1 the transfer is to a country, or to an organisation certified under a framework, that UK law recognises as providing an adequate level of protection for personal data, for example providers in the United States certified under the UK Extension to the EU US Data Privacy Framework; or

5.4.2 the transfer is made under an approved contract, such as the UK Addendum to the standard contractual clauses, or the International Data Transfer Agreement, which gives your personal data the same level of protection as it has in the UK.

5.5 Please contact us if you would like more information on the specific mechanism we use when transferring your personal data out of the UK.

6. How long we keep your data

6.1 We will only keep your personal data for as long as we need it to fulfil the purpose we collected it for, such as to respond to your enquiry or to provide you with our services.

6.2 The retention period for your data will depend on the purpose for which it is being used, including any legal or regulatory obligations that require us to retain it for a specified period, as set out in our internal policies. We may also retain your personal data for a longer period in the event of a legal complaint or proceedings.

6.3 If you want to know more about how long we hold your data, please contact us and we will endeavour to provide you with more detail on the retention period for the specific personal data you have provided to us.

7. Your rights

Under UK data protection law you have the right to:

access a copy of the personal data we hold about you;
ask us to correct personal data that is inaccurate or incomplete;
ask us to erase your personal data in certain circumstances;
ask us to restrict how we use your personal data in certain circumstances;
object to our use of your personal data where we rely on legitimate interests;
ask us to transfer your personal data to another provider in certain circumstances;
withdraw your consent at any time, where we rely on your consent.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month. There is normally no charge.

8. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

9. Cookies

Our site uses cookies. Please see our Cookie Policy for full detail on the cookies we use and how you can manage them.

10. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed. Please check back for the latest version.

11. Contact us

Alex Goodman, trading as GDPR Consultant

Email : [email protected]

Driven by expertise and personalised service, we’re here to guide you towards GDPR compliance every step of the way.

Business

Services

Socials

Documentation

Cookie Policy

Website Terms of Use

Client Testimonials

Existing DPO clients

Alex Goodman is an experienced GDPR consultant and outsourced Data Protection Officer working with UK businesses to improve their DPO and GDPR compliance.