Privacy Policy

Last updated: [Insert Date]

1. Introduction

Evercrest Management Consulting ("Evercrest", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with us, use our consulting services, visit our website, or otherwise engage with Evercrest Management Consulting in England.

We process personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

2. Who we are

Evercrest Management Consulting is a consulting firm based in England. We provide management consulting and related advisory services to organisations and individuals.

For the purposes of data protection law, we are usually the "data controller" of your personal data. This means we determine the purposes and means of processing your personal data.

3. Personal data we collect

The personal data we collect depends on how you interact with us and the services we provide. We may collect and process the following categories of personal data:

3.1 Identification and contact details

• Name and title
• Job title and role
• Company or organisation
• Business and/or personal email address
• Business and/or personal telephone number
• Postal address

3.2 Professional and business information

• Employment details (employer, department, responsibilities)
• Professional qualifications and experience
• Information about your organisation, projects, and objectives relevant to our consulting engagement

3.3 Engagement and communication data

• Records of our communications with you (emails, meeting notes, messages)
• Information you provide when you complete forms, questionnaires, or surveys
• Information you provide when you attend our meetings, workshops, or events

3.4 Website and technical data (where applicable)

• IP address and approximate location
• Browser type and version
• Device identifiers and operating system
• Usage data, such as pages visited and time spent on our site
• Cookies and similar technologies (see Section 10)

3.5 Financial and transactional data

• Bank account or payment details (where necessary to process payments)
• Billing address and invoicing information

3.6 Special category data We do not intentionally collect special category data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) in the ordinary course of our consulting services. If such information becomes relevant to a specific engagement, we will only process it where strictly necessary and lawful, and with appropriate safeguards.

4. How we collect your personal data

We may collect personal data from you directly and indirectly, including:

4.1 Directly from you

• When you contact us by email, phone, post, or through our website
• When you request or use our consulting services
• When you attend our meetings, events, or workshops
• When you subscribe to our communications, newsletters, or updates

4.2 From your organisation or colleagues

• When your employer or colleagues share your details as a point of contact
• When we are engaged by your organisation and need information about relevant stakeholders

4.3 From third parties

• Business partners, referrers, and intermediaries
• Publicly available sources (e.g., LinkedIn, company websites, public registers)
• Service providers that help us operate our business (e.g., analytics providers)

4.4 Automatically

• Through cookies and similar technologies when you interact with our website or online content

5. Legal bases for processing

We process your personal data only where we have a lawful basis to do so. Depending on the circumstances, we may rely on the following legal bases:

• Performance of a contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, and those interests are not overridden by your rights and freedoms. Our legitimate interests may include delivering and improving our consulting services, managing client relationships, and operating our business.
• Legal obligation: where processing is necessary for us to comply with a legal or regulatory obligation.
• Consent: where you have given us clear consent to process your personal data for a specific purpose. You can withdraw your consent at any time (see Section 9).

6. How we use your personal data

We may use your personal data for the following purposes:

• To provide and manage our consulting services, including project planning, analysis, and delivery.
• To respond to enquiries, requests, and correspondence from you or your organisation.
• To manage our contractual and client relationships, including invoicing and payments.
• To communicate with you about our services, insights, events, and updates, where permitted by law.
• To improve and develop our services, website, and business operations.
• To manage and protect our business, including troubleshooting, data analysis, testing, and system maintenance.
• To comply with legal, regulatory, and professional obligations, including record-keeping and reporting.
• To establish, exercise, or defend legal claims.

7. Sharing your personal data

We do not sell your personal data. We may share your personal data with the following categories of recipients, only to the extent necessary and with appropriate safeguards:

• Our employees, contractors, and consultants who need access to the data to perform their duties and provide our services.
• Professional advisers, such as lawyers, accountants, or auditors, where necessary for our business or legal obligations.
• Service providers and suppliers who perform services on our behalf (e.g., IT hosting, cloud storage, email and communication tools, CRM systems, analytics providers, payment processors).
• Business partners or other consulting firms, where collaboration is necessary to deliver services to you or your organisation, subject to confidentiality obligations.
• Regulatory authorities, law enforcement agencies, or public bodies, where we are required to disclose personal data by law or in order to protect our rights or the rights of others.
• Potential buyers, investors, or successors in the context of a merger, business restructuring, or sale of all or part of our assets, subject to appropriate confidentiality.

When we share personal data with third parties, we require them to handle it in accordance with applicable data protection laws and to use it only for the purposes for which it was provided.

8. International transfers

We are based in England, and your personal data may be stored and processed in the United Kingdom. In some cases, we may transfer personal data to third parties or service providers located outside the UK, including countries that may not provide the same level of data protection as the UK.

Where we transfer personal data outside the UK, we will ensure that appropriate safeguards are in place, such as:

• An adequacy regulation by the UK Government confirming that the country provides an adequate level of protection; or
• Standard contractual clauses or other approved contractual protections, together with any supplementary measures that may be required.

You may contact us for more information about the specific safeguards applied to international transfers.

9. Your data protection rights

Under UK data protection law, you have certain rights in relation to your personal data, subject to applicable exemptions and limitations. These may include:

• Right of access: to obtain confirmation as to whether we process your personal data and to receive a copy of it.
• Right to rectification: to have inaccurate or incomplete personal data corrected.
• Right to erasure: to request that we delete your personal data in certain circumstances (also known as the "right to be forgotten").
• Right to restriction of processing: to request that we limit the processing of your personal data in certain situations.
• Right to data portability: to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller, where technically feasible and where the processing is based on consent or contract and carried out by automated means.
• Right to object: to object to the processing of your personal data where we rely on legitimate interests or where we process it for direct marketing purposes.
• Rights related to consent: where we rely on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details set out in Section 13. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you are concerned about how we handle your personal data. For more information, please visit www.ico.org.uk.

10. Cookies and similar technologies

Our website may use cookies and similar technologies to enhance your browsing experience, analyse website usage, and support certain website functions.

Cookies are small text files placed on your device when you visit a website. They can be "session" cookies (which expire when you close your browser) or "persistent" cookies (which remain on your device for a set period or until deleted).

We may use:

• Strictly necessary cookies: required for the operation of our website.
• Performance or analytics cookies: to understand how visitors use our website and improve its performance.
• Functionality cookies: to remember your preferences and improve your user experience.

Where required by law, we will obtain your consent before placing non-essential cookies on your device. You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

11. Data security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or damage. These measures may include:

• Access controls and authentication
• Encryption and secure storage solutions where appropriate
• Regular monitoring, testing, and review of our security measures
• Staff training on data protection and confidentiality obligations

While we strive to protect your personal data, no method of transmission or storage is completely secure. You are responsible for keeping any passwords or access credentials confidential.

12. Data retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• The duration of our engagement with you or your organisation
• Any applicable limitation periods for legal claims
• Compliance with legal, regulatory, or professional record-keeping requirements

When personal data is no longer needed, we will securely delete or anonymise it in accordance with our data retention practices.

13. Contact us

If you have any questions about this Privacy Policy, our handling of your personal data, or if you wish to exercise your data protection rights, please contact Evercrest Management Consulting using the contact details provided on our official website or through your usual Evercrest contact.

Please include your name, contact details, and sufficient information about your request so that we can identify you and respond appropriately.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any changes will be posted on our website with an updated "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.