Privacy Policy (last updated: 21 May 2026)

Who We Are

This Privacy Policy explains how Contour Consulting ("we", "us", or the Company"), a business based in the UK, collects, uses, and protects your personal data when you visit our website at www.contourconsulting.uk.

We are the data controller for the personal information we collect. If you have any questions about this policy or how we handle your data, please contact us using the contact form on our homepage.

What Personal Data We Collect

When you use the contact form on our website, we collect the following information:

  • Your name

  • Your email address

  • Your phone number (if you provide it)

  • The content of your message

We do not collect any special category data (such as health information, political opinions, or financial data) through our website. We also do not use automated decision-making or profiling.

How We Collect Your Data

We collect personal data directly from you in the following ways:

  • Contact form: when you submit an enquiry through our website contact form.

  • Website analytics: we use Squarespace's built-in analytics to collect anonymised information about how visitors use our website. This may include your approximate location (country/region), the pages you visit, and the type of device you use. This data is aggregated and does not identify you personally.

Why We Use Your Data and Our Legal Basis

We process your personal data for the following purposes:

  • Responding to enquiries

    • When you contact us via our website form, we use your name, email address, and message to respond to your enquiry and discuss how we may be able to help you.

    • Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — it is in both our and your interest for us to respond to your enquiry. Where an enquiry relates to entering a contract with us, we may also rely on Article 6(1)(b) (performance of a contract or pre-contractual steps).

  • Improving Our Website

    • We use anonymised analytics data from Squarespace to understand how our website is used, so we can improve its content and performance.

    • Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — we have a legitimate interest in understanding how our website performs.

Who We Share Your Data With

We do not sell your personal data to third parties. We may share your data with:

  • Squarespace Inc.: our website is hosted on Squarespace, which processes limited technical and analytics data on our behalf as a data processor. Squarespace is certified under the EU-US and UK-US Data Privacy Frameworks and employs appropriate safeguards for data transfers.

  • Our staff: only authorised members of our team who need to see your enquiry in order to respond to it.

We will only share your data with other third parties if we are required to do so by law.

International Data Transfers

Squarespace is a US-based company. When your data is processed by Squarespace, it may be transferred to and stored in the United States. Squarespace participates in the UK Extension to the EU-US Data Privacy Framework, which provides an appropriate safeguard for such transfers under UK GDPR. For more information, see Squarespace's Privacy Policy.

We do not otherwise transfer your personal data outside the United Kingdom.

How Long We Keep Your Data

We retain personal data submitted through our contact form for up to 2 years from the date of your enquiry, or for as long as necessary to fulfil the purpose for which it was collected, whichever is shorter.

Anonymised website analytics data held by Squarespace is retained in accordance with Squarespace's own data retention policies.

Once data is no longer needed, we delete or securely destroy it.

Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

  • Right of access: you can request a copy of the personal data we hold about you.

  • Right to rectification: you can ask us to correct inaccurate or incomplete data.

  • Right to erasure: you can ask us to delete your data where there is no lawful reason for us to continue processing it.

  • Right to restrict processing: you can ask us to pause the processing of your data in certain circumstances.

  • Right to data portability: you can request your data in a structured, commonly used, machine-readable format.

  • Right to object: you can object to our processing of your data where we rely on legitimate interests as our legal basis.

To exercise any of these rights, please contact us using the contact form on our homepage. We will respond within one calendar month. We will not charge a fee for reasonable requests.

Cookies

Our website is built on Squarespace, which uses cookies and similar technologies to enable essential website functions and to collect anonymised analytics data. We do not use advertising cookies or track you across other websites.

You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of this website.

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses HTTPS encryption for data transmission. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of any website you visit.

How to Make a Complaint

If you have concerns about how we handle your personal data, please contact us in the first instance so we can try to resolve your concern.

If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised 'last updated' date. We encourage you to review this policy periodically.