Privacy Policy

1. Data Controller

Habban Consultancy Ltd (Company Number: 16917767) is the data controller responsible for your personal data.

Company name: Habban Consultancy Ltd
Company type: Private Limited Company
Country of registration: United Kingdom
Contact email: ajs@habbanconsultancy.com

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you interact with us, including via our website, consultation requests, newsletters, and client engagements.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a. Consultation and enquiry data

Full name or business name

Email address

Phone number

Postal address

Information you choose to provide in enquiry text fields

Files you upload (where applicable)

CAPTCHA verification data (to prevent spam and abuse)

b. Marketing data

Email address

Preferences relating to newsletter subscriptions

c. Client and transactional data (where an engagement proceeds)

Billing and invoicing details

Payment-related information (processed via third-party providers)

Contractual correspondence and records

We do not intentionally collect special category data.

3. How We Use Your Personal Data

We use personal data to:

Respond to enquiries and consultation requests

Communicate with you about our services

Deliver consultancy services where engaged

Send newsletters and business updates where you have subscribed

Administer contracts, payments, and invoices

Maintain internal business records

Protect our website from spam and misuse

We do not sell personal data or share it for third-party marketing purposes.

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

Legitimate interests – to respond to enquiries, manage client relationships, operate and grow our consultancy business

Consent – for newsletter subscriptions and similar marketing communications

Contract – where processing is necessary to deliver agreed services

Legal obligation – where required for accounting, tax, or regulatory purposes

You may withdraw consent for marketing at any time.

5. Data Storage and Security

Personal data is stored securely using appropriate technical and organisational measures designed to protect against unauthorised access, loss, or misuse.

Access to personal data is limited to those who need it for legitimate business purposes.

6. Data Retention

We retain personal data only for as long as necessary, as follows:

Enquiry and consultation data: up to 12 months after the last contact

Newsletter data: until you unsubscribe or withdraw consent

Client and invoicing records: retained for up to 6 years to meet legal and accounting obligations

Data is securely deleted or anonymised once retention periods expire.

7. Sharing Your Personal Data

We may share personal data with trusted third-party service providers who support our operations, including:

Website hosting and infrastructure providers

Email and productivity service providers

Cloud storage and IT service providers

Payment and invoicing providers (where applicable)

These providers act as data processors and are contractually required to protect personal data and use it only in accordance with our instructions.

8. International Data Transfers

Personal data is primarily stored within the UK and European Economic Area (EEA).
Some cloud-based services we use may involve data being processed outside the UK or EEA.

Where this occurs, appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to ensure compliance with UK GDPR.

9. Your Data Protection Rights

You have the right to:

Access the personal data we hold about you

Request correction of inaccurate or incomplete data

Request deletion of your personal data

Object to or restrict certain processing

Withdraw consent for marketing at any time

Request data portability where applicable

To exercise any of these rights, contact us at ajs@habbanconsultancy.com.

10. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

We encourage you to contact us first so we can address your concerns directly.

11. Cookies and Website Security

Our website uses essential cookies and security technologies, including CAPTCHA, to ensure proper functionality and protect against spam and abuse.

We do not use advertising or tracking cookies without appropriate consent.

12. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website.

Final compliance note