Privacy Policy

---

Ocean Wave Consultancy Ltd – GDPR Privacy Policy

1. Introduction

Ocean Wave Consultancy Ltd is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Ocean Wave Consultancy Ltd Registered in the United Kingdom.

Contact: Neil Rawlinson founder and CEO at: neil.rawlinson@oceanwaveconsultancy.co.uk 

I act as the Data Controller for all personal data processed in relation to our consulting services.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: name, job title, organisation
• Contact data: email address, phone number, postal address
• Case‑related information: documents, communications, and any information required to deliver      consulting services
• Financial data: invoices, payment information
• Technical data: IP address, browser type, and usage information (if applicable)

4. How We Collect Personal Data

We collect personal data through:

• Direct communication (email, phone, meetings)
• Documents provided by clients
• Website contact forms (if applicable)
• Third parties where relevant and lawful

5. Legal Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity: to deliver consulting services
• Legal obligation: to comply with regulatory or statutory requirements
• Legitimate interests: to manage our business operations
• Consent: where explicitly provided

6. How We Use Personal Data

We use personal data to:

• Provide consulting services
• Communicate with clients
• Maintain records and documentation
• Issue invoices and manage payments
• Meet legal and regulatory obligations
• Improve our services and operations

We do not sell or share personal data for marketing purposes.

7. Data Sharing

We may share personal data with:

• Professional partners or subcontractors assisting with a case
• Legal or regulatory authorities where required
• Service providers such as accountants, IT support, or cloud storage      providers

We do not share personal data of individuals with employers. Annual reports are anonymised to protect individual rights whilst demonstrating the support provided to employees.

All third parties are required to maintain GDPR‑compliant safeguards.

8. Data Storage and Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Secure digital storage
• Access controls
• Encryption where appropriate
• Regular security reviews

9. Data Retention

Ocean Wave Consultancy Ltd retains all case‑related material for 7 years after the conclusion of each case, unless a longer retention period is required by law or necessary for the establishment, exercise, or defence of legal claims.

After the retention period expires, data is securely deleted or destroyed.

10. Your Rights Under GDPR

Individuals have the following rights:

• Right to access – request a copy of your personal data
• Right to rectification – correct inaccurate information
• Right to erasure – request deletion of your data (subject to legal obligations)
• Right to restrict processing
• Right to data portability
• Right to object to certain types of processing
• Right to withdraw consent (where consent is the legal basis)

Requests can be made by contacting us at: info@oceanwaveconsultancy.co.uk

11. International Transfers

We do not routinely transfer personal data outside the UK. If such transfers become necessary, we will ensure appropriate safeguards (e.g., Standard Contractual Clauses).

12. Cookies (if applicable)

We do not use cookies to collect personal data.

13. Complaints

If you have concerns about how your data is handled, you may contact:

Information Commissioner’s Office (ICO) Website: ico.org.uk Telephone: 0303 123 1113

14. Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be available upon request or on our website (if applicable).