Privacy
Policy

At Burrfield Consulting, we are

committed to protecting and

respecting your privacy.

Try Now

This policy explains how we collect, use, and protect your personal data in accordance with the UK GDPR and the Data Protection Act 2018.

Information We Collect

We may collect and process the following types of personal data:

  • Identifiers: Name, email address, company, phone number (when submitted via contact forms)
  • Technical data: IP address, browser type, operating system, device identifiers
  • Usage data: Page views, referrers, session duration, click behaviour
  • Marketing data: UTM campaign tracking parameters (if provided)

How We Collect Your Data

We collect data in the following ways:

  • Directly from you via contact forms
  • Automatically via tracking tools and analytics scripts (e.g., Microsoft Clarity)
  • From cookies and local storage (see 5. Cookies and Tracking Technologies for details)

Purposes and Legal Bases for Processing

We process personal data for a range of purposes in accordance with the lawful bases set out in the UK GDPR.

  • When you submit an enquiry through our contact forms, we rely on our legitimate interest in responding to communications or, where applicable, your explicit consent.
  • For website analytics and tracking, we rely on your consent, which is obtained via our cookie banner.
  • Where we enter into contracts with consultancy clients, we process relevant personal data as necessary for the performance of those contracts.
  • Additionally, we may process personal data where required to comply with our legal obligations.

While we have not yet completed a formal Legitimate Interest Assessment (LIA), we intend to implement one for applicable processing activities during 2025.

Cookies and Tracking Technologies

We currently use a basic cookie banner to inform users of tracking. The tools in use include:

  • Microsoft Clarity (session replays and heatmaps)
  • Potential scripts for browser/user agent detection and page interaction monitoring

Important note: Some non-essential cookies (e.g., analytics) may load prior to consent under our current implementation. We are planning to implement a fully consent-driven, custom Cookie Management Platform (CMP) in 2025./p>

To change your Cookie preferences,

We review this policy regularly. Any updates will be published on this page.

Sharing Your Data

We may share your data with trusted service providers:

  • Web hosting: GoDaddy (UK/EEA based)
  • Analytics: Microsoft Clarity (may transfer data internationally)

We do not sell or rent your personal data.

International Data Transfers

Where personal data is transferred outside the UK/EEA, we ensure adequate safeguards are in place. These may include:

  • Data transfers to countries with adequacy decisions
  • Standard Contractual Clauses (SCCs) approved by the UK or EU

We are currently reviewing our hosting and analytics partners to confirm exact transfer locations.

How Long We Keep Your Data

We retain personal data for no longer than is necessary.

  • Enquiry data: up to 3 months after last contact
  • Client data: in line with contractual and legal requirements
  • Tracking data: varies based on tool configuration (typically 30–90 days)

Your Rights

Under Data Protection Law, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure of your data
  • Restrict or object to certain types of processing
  • Withdraw consent at any time (where applicable)
  • Lodge a complaint with the UK ICO

Complaints

If you are unsatisfied with how we process your data, you can contact the Information Commissioner’s Office (ICO):

  • Website: www.ico.org.uk
  • Phone: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Contact Us

If you have any questions about this privacy policy or our privacy practices, feel free to contact us at (We aim to respond within one calendar month.):

with (Subject: Data Subject Request)

Sic Parvis Magna: Greatness from small beginnings