1. Who we are
We are the data controller for personal information collected through this website and our services.
- Gero Consultants Limited (“we”, “us”, “our”)
- Company number: 17103749
- Registered office: 14 Almond Way, Lutterworth, LE17 4XJ
- Contact: Chris Southwell
- Email: chris.southwell@geroconsultants.co.uk
2. What this policy covers
This policy explains what personal data we collect, how we use it, our legal bases for processing under the UK GDPR and Data Protection Act 2018, and your rights.
3. The data we collect
- Contact details: name, email address, phone number, company, job title.
- Enquiry information: the message you send us via forms or email.
- Usage and technical data: IP address, device/browser type, pages viewed, and similar analytics data (if enabled).
- Business relationship data: notes relating to your enquiry, proposals, contracts, invoices, and communications.
We do not intentionally collect special category data (e.g., health, ethnicity) or children’s data.
4. How we collect data
- Directly from you when you complete our contact form, email us, call us, or meet us at events.
- Automatically via cookies and similar technologies when you use our website (see “Cookies” below).
- From third parties where lawful, for example a referral partner or public professional profiles (e.g., LinkedIn) relevant to a B2B enquiry.
5. How we use your data (purposes and legal bases)
- Responding to enquiries and providing quotations or proposals
- Legal basis: Legitimate interests (to operate and grow our business and respond to requests) or steps to enter into a contract at your request.
- Providing our consulting services and managing our relationship with you
- Legal basis: Contract (performance of a contract with you) and legitimate interests (account management).
- Communications about our services (non‑intrusive B2B updates)
- Legal basis: Legitimate interests. You can opt out at any time.
- Legal, compliance and record keeping (e.g., tax, accounting)
- Legal basis: Legal obligation and legitimate interests (establishing or defending legal claims).
- Website analytics and performance
- Legal basis: Consent (if using non‑essential cookies) or legitimate interests for strictly necessary, privacy‑friendly analytics.
6. Sharing your data
We only share personal data when necessary:
- Service providers/“processors” acting on our instructions (e.g., website host, email service, secure cloud storage, analytics). We require appropriate confidentiality and data protection commitments.
- Professional advisers (e.g., accountants, lawyers) where necessary.
- Authorities where required by law or to protect our legal rights.
We do not sell your personal data.
7. International transfers
Some providers may process data outside the UK. Where this occurs, we use appropriate safeguards (e.g., UK International Data Transfer Agreement, UK Addendum to the EU SCCs, or equivalent adequacy decisions).
8. Data retention
- We keep personal data only as long as necessary:
Enquiries and prospect records: up to 24 months from last contact if no contract is formed.
- Client records, contracts, and invoices: generally 6–7 years to meet legal/accounting requirements.
- Analytics data: in line with our analytics tool’s retention settings. We will delete or anonymise data when it is no longer needed.
9. Your rights (UK GDPR) You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your data (in certain circumstances)
- Restrict processing (in certain circumstances)
- Object to processing based on legitimate interests or direct marketing
- Data portability (for data you provided to us where processing is by consent or contract) To exercise your rights, contact us using the details above. We will respond within one month. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, but please contact us first so we can try to resolve your concern.
10. Cookies
Our website may use cookies or similar technologies.
- Essential cookies: required for site operation (no consent required).
- Analytics cookies: help us understand site usage and improve content (consent may be required). You can control cookies via our cookie banner (if enabled) and your browser settings.
11. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and secure storage. While no system is perfectly secure, we work to protect your information from unauthorised access, alteration, or disclosure.
12. Third‑party providers we use:
- Website hosting: 123 Reg (United Kingdom/EEA). Hosting and DNS for our domain and website.
- Email and productivity: Microsoft 365.
- Contact forms: 123 Reg Website Builder forms (delivered to our email).
- Analytics: Google Analytics 4 with IP anonymisation.
- Other tools for service delivery: We will agree roles and responsibilities in our client contracts where tools are used to deliver services.
13. B2B marketing We may send relevant B2B communications to business contacts under legitimate interests. You can opt out at any time by clicking an unsubscribe link (if email platform is used) or by emailing us.
14. Children
Our services are aimed at businesses and professionals. We do not knowingly collect data relating to children.
15. Changes to this policy
We may update this policy from time to time to reflect changes in law or our practices. The latest version will always be available on this page.
- Last updated: 26/05/26
- Version: 1.0
16. How to contact us
Questions about this policy or your personal data: