Privacy Policy

Last updated: April 2026

1. Introduction

Easton Consulting & Advisory Ltd (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at eastonadvisory.co.uk and use our services.

We are registered in England and Wales. For the purposes of UK data protection legislation (the UK General Data Protection Regulation and the Data Protection Act 2018), the data controller is Easton Consulting & Advisory Ltd.

2. Information We Collect

We may collect and process the following personal data:

2.1 Information you provide to us

• Contact form submissions: First name, last name, email address, phone number (optional), company/organisation name (optional), service of interest, and your message.
• Email correspondence: Any personal data included in emails you send to us directly.
• WhatsApp messages: If you contact us via our WhatsApp link, your phone number and message content.

2.2 Information collected automatically

• Cookie consent preference: We store your cookie consent choice (accepted or declined) in your browser’s local storage.
• Technical data: Your browser type, operating system, and general location data may be collected through standard web server logs.

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries: When you submit a contact form or email us, we use your details to respond and provide the information or services you have requested.
• To provide advisory services: If you engage our services, we process your data as necessary to deliver those services.
• To improve our website: We may use anonymised, aggregated data to understand how visitors use our website and improve its content and functionality.
• To comply with legal obligations: We may process your data where necessary to comply with applicable laws and regulations.

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

• Consent: Where you have given us clear consent to process your personal data for a specific purpose (e.g., submitting a contact form).
• Legitimate interest: Where processing is necessary for our legitimate business interests, such as responding to enquiries and improving our services, provided these interests are not overridden by your rights.
• Contractual necessity: Where processing is necessary to fulfil a contract with you or to take steps at your request prior to entering into a contract.
• Legal obligation: Where we need to process your data to comply with a legal requirement.

5. Data Storage and Security

Your contact form submissions are stored securely in an encrypted database hosted by our technology provider. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are typically retained for up to 24 months unless you request earlier deletion.

6. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share your data with:

• Service providers: Trusted third-party service providers who assist us in operating our website and delivering services (e.g., hosting, email delivery). These providers are contractually bound to protect your data.
• Legal requirements: Where we are required to disclose your data by law, regulation, or court order.

7. Cookies

Our website uses minimal cookies. When you first visit our site, a cookie consent banner will appear allowing you to accept or decline cookies.

We store your cookie consent preference in your browser’s local storage (not as a cookie itself). This is a strictly necessary function to remember your preference and does not track your browsing activity.

We do not use third-party advertising or tracking cookies.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing: You can ask us to suspend the processing of your personal data in certain circumstances.
• Right to data portability: You can request that we transfer your data to another organisation or directly to you, in a structured, commonly used format.
• Right to object: You can object to the processing of your personal data where we are relying on legitimate interest as the legal basis.
• Right to withdraw consent: Where we rely on your consent to process your data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided below.

9. Third-Party Links

Our website may contain links to external websites (e.g., WhatsApp, Bravehat Consulting). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read their privacy policies before providing any personal data.

10. Children’s Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can take appropriate steps.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how your data is handled, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection. You can contact the ICO at ico.org.uk.