Privacy notice

Last updated: 6 September 2026

Privacy notice

1. Who we are

Tanda Consulting is the data controller for the personal information described in this notice. We are based in Milton Keynes, Buckinghamshire, and work with clients across the United Kingdom.

If you have any question about this notice or about how we handle your information, contact us at info@tandaconsulting.co.uk or on 07873 189341.

2. The information we collect

We collect personal information in three situations.

When you contact us

If you complete the enquiry form on our contact page, we collect your name, email address, telephone number and whatever you choose to tell us in your message. If you email or telephone us instead, we hold the contents of that correspondence.

When we work with you

During an engagement we may hold the names, roles and contact details of people at your organisation, together with any personal information contained in documents you share with us. Where an engagement involves financial or commercial records, we treat everything in them as confidential.

When you visit this website

Our hosting provider records standard technical information — including IP address, browser type and the pages requested — in server logs. This is a normal part of operating a website and is used to keep the site available and secure.

We also count visits ourselves, so that we know whether the site is being read. When you open a page we record the page address, the date and time, the website you arrived from if there was one, and whether you are using a phone or a computer. We record the same when someone sends the enquiry form or taps our telephone number or email address.

This counting is done on our own server. Nothing is sent to any analytics company, no cookie is set, and your IP address and browser details are never stored. To recognise that several pages were read by the same person rather than by several people, we convert those details into a short scrambled code that changes every day and cannot be turned back into anything identifying you. There is no advertising and no tracking across other websites.

3. Why we use it, and our lawful basis

• To respond to your enquiry. Our lawful basis is legitimate interests — you have approached us about our services and it is in both our interests that we reply.
• To provide services under an engagement. Our lawful basis is performance of a contract, or legitimate interests where the contract is with your organisation rather than with you personally.
• To meet our legal and regulatory obligations, such as keeping accounting records. Our lawful basis is legal obligation.
• To keep this website secure and available. Our lawful basis is legitimate interests.
• To understand whether this website is being read. Our lawful basis is legitimate interests — we need to know whether the site is doing its job, and we have chosen the least intrusive way we could find to find out.

We do not use your information to send marketing, and we do not sell or rent it to anyone.

4. Who we share it with

We do not share personal information except as set out below.

• Hostinger, our hosting and email provider. This website is hosted by Hostinger, who therefore hold your enquiry on their servers while it is being sent to us, and keep standard server logs. Our email system is provided by Hostinger as well, so correspondence with us is held there. The enquiry form is not handled by any third-party service — it is processed on our own hosting and emailed directly to us.
• Professional advisers, such as our accountant, where they need the information to advise us.
• Anyone we are legally required to disclose to, for example a regulator, court or law enforcement body.

Where we engage a supplier to process personal information on our behalf, we put a written agreement in place requiring them to protect it and to act only on our instructions.

5. Where your information is held

Some of the providers we rely on are based outside the United Kingdom, or store data outside it. Where personal information is transferred abroad, we rely on the safeguards those providers have in place — such as UK adequacy regulations or the International Data Transfer Addendum — to ensure it receives equivalent protection.

6. How long we keep it

• Enquiries that do not lead to work: up to 12 months from our last contact with you, after which we delete them.
• Client records: for six years after the end of the engagement, reflecting the periods for which we may need records for tax purposes and to answer a legal claim.
• Server logs: for a short period set by our hosting provider, typically no more than a few weeks.
• Visit counts: for 24 months, after which they are deleted automatically. They contain no personal information by then — the daily code that grouped one person's page views expired the day it was created.

7. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information where there is no good reason for us to keep it;
• ask us to restrict how we use it while a concern is resolved;
• object to our using it where we rely on legitimate interests;
• ask us to transfer it to you or another organisation, in certain cases; and
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email info@tandaconsulting.co.uk. We will respond within one month. There is no charge.

8. Cookies and this website

This website does not set any cookies. There is no advertising, no tracking across other websites, and no cookie banner, because there is nothing to consent to.

We do count visits, as described in section 2, but we do it on our own server and without cookies or any third-party analytics service. If your browser is set to send a "Do Not Track" request, we honour it and your visit is not counted at all.

The site does load typefaces from Google Fonts. Doing so sends your IP address to Google in order to deliver the font files. No cookie is set by this, but it is a transfer of information to a third party and we mention it so that the position is clear.

9. Keeping information secure

We limit access to personal information to those who need it, use reputable providers with appropriate security measures, and keep the amount of information we hold to what the work requires. No system can be guaranteed completely secure, but we take these obligations seriously and will tell you and the Information Commissioner's Office promptly if a breach occurs that is likely to affect you.

10. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised. Where a change materially affects how we use your information, we will take reasonable steps to bring it to your attention.

11. How to complain

If you are unhappy with how we have handled your personal information, please tell us first so that we have the chance to put it right. You also have the right to complain to the Information Commissioner's Office at any time.

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk