Privacy Policy
Last updated: 12th July 2026
This policy explains how Alex Lilly ("I", "me") collects and uses personal data when you visit this website or get in touch about consultancy services. I am committed to handling your information responsibly and in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who is responsible for your data?
Alex Lilly
Business Insight & Data Consultant
Email: alexlilly@alillybusinessconsultant.com
For the purposes of data protection law, I am the data controller for personal data collected through this website and initial business enquiries.
What data I collect
I may collect the following personal data:
When you contact me via the website form, email, or phone:
- Your name
- Business name (if provided)
- Email address
- Phone number (if provided)
- The content of your message or enquiry
When you visit this website:
- Technical data such as IP address, browser type, and device information (if analytics are enabled)
- Cookie data (if cookies are used — see below)
Note: I do not intentionally collect special category personal data through this website.
How I use your data
I use your personal data to:
- Respond to enquiries and communicate with you about potential or ongoing work
- Provide consultancy services you have engaged me for
- Improve this website (where analytics are used)
- Comply with legal and regulatory obligations
Lawful bases for processing:
- Legitimate interests — responding to enquiries and operating my business
- Contract — where you have engaged me for services
- Consent — where required (e.g. non-essential cookies, if used)
How long I keep your data
- Enquiry data: retained for up to 12 months after our last contact, unless a business relationship continues
- Client project data: retained only as long as necessary for the project, handover, and any agreed follow-up, then securely deleted or returned to you
- Analytics data: retained according to the analytics provider's settings (typically up to 14 months)
Who I share your data with
I do not sell your personal data.
I may share data with trusted service providers who help me operate this website or business, such as:
- Website hosting provider
- Email service provider
- Form submission / contact tool provider
- Analytics provider (if enabled)
These providers process data on my behalf and only as necessary to provide their service.
Client data & consultancy work
When you engage me for consultancy services, you may provide business data for analysis. This is handled separately from website enquiry data and is subject to:
- Confidentiality agreements where appropriate
- Secure storage and access controls
- Data minimisation — collecting and using only what is needed for the project
- Secure deletion or return of data at project completion, unless otherwise agreed
Your rights
Under UK GDPR, you have the right to:
- Access the personal data I hold about you
- Request correction of inaccurate data
- Request deletion of your data (in certain circumstances)
- Object to or restrict processing (in certain circumstances)
- Request data portability (where applicable)
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, contact me at alexlilly@alillybusinessconsultant.com.
Cookies & analytics
This website may use cookies to ensure basic functionality and, if enabled, to understand how visitors use the site.
Essential cookies are necessary for the website to function.
Analytics cookies (if used) help me understand traffic and improve the site. These will only be used with appropriate consent where required.
You can manage cookie preferences via your browser settings or any cookie banner displayed on the site.
Data security
I take appropriate technical and organisational measures to protect personal data, including secure hosting, password-protected systems, and two-factor authentication where possible.
No method of transmission over the internet is completely secure, but I take reasonable steps to protect your information.
International transfers
If any service providers process data outside the UK, I ensure appropriate safeguards are in place as required by UK data protection law.
Changes to this policy
I may update this policy from time to time. The latest version will always be published on this page with an updated "last updated" date.
Contact
If you have questions about this privacy policy or how your data is handled: