Privacy notice

Last updated: 6 August 2026

Privacy notice

1. Who we are

Tanda Consulting [insert full registered name, and company number if you are a limited company] is the data controller for the personal information described in this notice. We are based in Milton Keynes, Buckinghamshire, and work with clients across the United Kingdom.

If you have any question about this notice or about how we handle your information, contact us at tandaconsulting.mk@gmail.com or on 07746 159837.

We are registered with the Information Commissioner's Office under registration number [insert ICO registration number].

2. The information we collect

We collect personal information in three situations.

When you contact us

If you complete the enquiry form on our contact page, we collect your name, email address, telephone number and whatever you choose to tell us in your message. If you email or telephone us instead, we hold the contents of that correspondence.

When we work with you

During an engagement we may hold the names, roles and contact details of people at your organisation, together with any personal information contained in documents you share with us. Where an engagement involves financial or commercial records, we treat everything in them as confidential.

When you visit this website

Our hosting provider records standard technical information — including IP address, browser type and the pages requested — in server logs. This is a normal part of operating a website and is used to keep the site available and secure. This site does not use analytics, advertising or tracking of any kind.

3. Why we use it, and our lawful basis

• To respond to your enquiry. Our lawful basis is legitimate interests — you have approached us about our services and it is in both our interests that we reply.
• To provide services under an engagement. Our lawful basis is performance of a contract, or legitimate interests where the contract is with your organisation rather than with you personally.
• To meet our legal and regulatory obligations, such as keeping accounting records. Our lawful basis is legal obligation.
• To keep this website secure and available. Our lawful basis is legitimate interests.

We do not use your information to send marketing, and we do not sell or rent it to anyone.

4. Who we share it with

We do not share personal information except as set out below.

• Our email provider. Correspondence with us is held in our email system, currently provided by Google.
• Our hosting provider. This website is hosted by Hostinger, who therefore hold the enquiry on their servers while it is being sent to us, and keep standard server logs. The form is not handled by any third-party service — it is processed on our own hosting and emailed directly to us.
• Professional advisers, such as our accountant, where they need the information to advise us.
• Anyone we are legally required to disclose to, for example a regulator, court or law enforcement body.

Where we engage a supplier to process personal information on our behalf, we put a written agreement in place requiring them to protect it and to act only on our instructions.

5. Where your information is held

Some of the providers we rely on are based outside the United Kingdom, or store data outside it. Where personal information is transferred abroad, we rely on the safeguards those providers have in place — such as UK adequacy regulations or the International Data Transfer Addendum — to ensure it receives equivalent protection.

6. How long we keep it

• Enquiries that do not lead to work: up to [12 months — confirm] from our last contact with you, after which we delete them.
• Client records: for [six years — confirm] after the end of the engagement, reflecting the periods for which we may need records for tax purposes and to answer a legal claim.
• Server logs: for a short period set by our hosting provider, typically no more than a few weeks.

7. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information where there is no good reason for us to keep it;
• ask us to restrict how we use it while a concern is resolved;
• object to our using it where we rely on legitimate interests;
• ask us to transfer it to you or another organisation, in certain cases; and
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email tandaconsulting.mk@gmail.com. We will respond within one month. There is no charge.

8. Cookies and this website

This website does not set any cookies. There is no analytics, no advertising, no tracking and no cookie banner, because there is nothing to consent to.

The site does load typefaces from Google Fonts. Doing so sends your IP address to Google in order to deliver the font files. No cookie is set by this, but it is a transfer of information to a third party and we mention it so that the position is clear.

9. Keeping information secure

We limit access to personal information to those who need it, use reputable providers with appropriate security measures, and keep the amount of information we hold to what the work requires. No system can be guaranteed completely secure, but we take these obligations seriously and will tell you and the Information Commissioner's Office promptly if a breach occurs that is likely to affect you.

10. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised. Where a change materially affects how we use your information, we will take reasonable steps to bring it to your attention.

11. How to complain

If you are unhappy with how we have handled your personal information, please tell us first so that we have the chance to put it right. You also have the right to complain to the Information Commissioner's Office at any time.

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk