Legal
Privacy Policy
Last updated: 20 April 2026
Urchmond Management & Consultancy is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we use it — in plain language, in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Urchmond Management & Consultancy Company ("UMC", "we", "us", "our") is the data controller responsible for the personal data you provide to us. We are registered in England and Wales.
Contact: [email protected]
2. What Data We Collect
We collect only the data necessary to provide our services and communicate with prospective clients:
— Name and company name (provided via our contact form or chat widget)
— Business email address
— Description of your business challenge (submitted via contact form)
— Chat conversation content (submitted via ClawBot)
— Newsletter email address (submitted voluntarily)
— Usage data (pages visited, session duration) via analytics — anonymised and aggregated
We do not collect payment data, national identification numbers, or sensitive personal data.
3. How We Use Your Data
We use your personal data for the following purposes:
— To respond to your enquiry within 48 hours
— To conduct the initial diagnostic conversation and onboarding process
— To send the UMC Intelligence Briefing (newsletter) where you have subscribed
— To improve the website and user experience (aggregated analytics only)
— To comply with legal obligations
We do not sell, trade, or transfer your personal data to third parties without your consent, except as required to deliver our services (e.g. email infrastructure providers under data processing agreements).
4. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases:
— Legitimate interest: responding to business enquiries from potential clients
— Consent: newsletter subscriptions (you may withdraw consent at any time)
— Legal obligation: compliance with UK law where required
5. Data Retention
Enquiry and contact data is retained for 24 months from the date of last contact, after which it is securely deleted unless we have entered an ongoing engagement.
Newsletter subscriber data is retained until you unsubscribe.
Analytics data is retained for 12 months in aggregated, anonymised form.
6. Your Rights
Under UK GDPR, you have the following rights:
— Right of access: request a copy of the personal data we hold about you
— Right to rectification: request correction of inaccurate data
— Right to erasure: request deletion of your personal data
— Right to restrict processing: request that we limit how we use your data
— Right to data portability: receive your data in a structured, machine-readable format
— Right to object: object to processing based on legitimate interest
— Right to withdraw consent: withdraw consent to newsletter emails at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Cookies
This website uses only essential cookies required for it to function. We do not use advertising, tracking, or profiling cookies.
Analytics is conducted on aggregated, anonymised session data. No individual-level tracking takes place.
8. Third-Party Services
We use the following third-party infrastructure to operate this website:
— Cloudflare Pages (hosting and CDN) — processes data in accordance with Cloudflare's privacy policy
— Cloudflare Workers (form submission and chat API) — data processing agreement in place
— Google Fonts (typography) — font files served from Google's CDN; no personal data is transmitted beyond standard browser requests
No third-party advertising, retargeting, or social media tracking pixels are in use on this website.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Data transmitted to our Workers API is encrypted in transit via HTTPS/TLS.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay.
10. Supervisory Authority
If you believe we have handled your personal data incorrectly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK supervisory authority for data protection matters.
ICO website: ico.org.uk
Helpline: 0303 123 1113
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on this page. The "Last updated" date at the top of this policy will always reflect the most recent revision.
Data Protection Enquiries
For all data protection and privacy matters, contact us directly:
[email protected]