Privacy Policy

Effective date: [22 July 2026]
Last updated: [22 July 2026]

What this policy covers

This policy applies to personal data we process in connection with:

• our website and related digital channels;
• our consulting, staffing, managed services, AI, cloud and cybersecurity services;
• business development and client relationship management;
• recruitment and candidate management; and
• events, newsletters and other marketing communications.

Personal data we collect

The personal data we collect depends on how you interact with us. It may include:

• Contact and identity data, such as your name, work email address, telephone number, company name, job title and postal address;
• Enquiry and relationship data, such as the contents of your messages, project requirements, service interests, meeting notes and other business communications;
• Recruitment and professional data, such as your CV or résumé, employment history, qualifications, certifications, technical skills, references, interview notes, salary expectations, work preferences and, where lawful and relevant, right-to-work or background-check information;
• Marketing data, such as your preferences for receiving communications from us; and
• Technical and usage data, such as your IP address, browser type, device information, pages viewed, dates and times of visits, referring pages and cookie or similar tracking data, including information generated by website visitor identification technologies that may associate your visit with other personal information such as your business email address.

How we collect personal data

We collect personal data:

• directly from you when you complete forms, contact us, apply for a role, subscribe to updates or otherwise communicate with us;
• automatically when you use our website, through cookies, server logs and similar technologies; and
• from third parties where appropriate, such as clients, referees, recruitment platforms, professional networking sites, analytics providers or publicly available sources.

How we use personal data

We use personal data to:

• operate, maintain and improve our website and services;
• respond to enquiries and requests;
• manage client, supplier and business relationships;
• recruit, assess and communicate with candidates;
• match candidates with relevant opportunities;
• provide newsletters, updates and other marketing communications, where permitted by law;
• protect our systems, website, staff, users and business;
• monitor, investigate and prevent fraud, misuse and security incidents;
• comply with legal, regulatory and contractual obligations; and
• establish, exercise or defend legal claims.

Lawful bases

Where UK or EU data protection law applies, we rely on one or more of the following lawful bases:

• consent;
• performance of a contract or steps taken at your request before entering into a contract;
• legitimate interests, where these are not overridden by your rights and interests; and
• compliance with a legal obligation.

If we rely on consent, you may withdraw it at any time. If we rely on legitimate interests, we will consider the impact on your rights before processing.

Cookies and similar technologies

We use cookies and similar technologies to run our website, remember preferences, understand how visitors use the site, improve performance and, where applicable, measure the effectiveness of our communications.

Where required by law, we will ask for your consent before placing non-essential cookies. You can manage cookie preferences through our cookie tools, where available, or through your browser or device settings. Blocking some cookies may affect how the website works.

Website visitor identification

We use a website visitor identification tool to identify certain companies and individuals who visit our website, based on their online activity. When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

How we share personal data

We may share personal data with:

• service providers who support our business, such as hosting, cloud, communications, analytics, CRM, recruitment, IT support, website visitor identification and security providers;
• clients, hiring organisations and business counterparties where this is necessary to provide our services, support recruitment activities or respond to your request;
• professional advisers, auditors, insurers and legal representatives;
• regulators, law enforcement agencies, courts or other authorities where required by law or to protect our rights; and
• a buyer, investor or successor organisation in connection with a merger, acquisition, reorganisation or sale of all or part of our business.

We require service providers processing personal data on our behalf to use appropriate safeguards and act only on our instructions.

Subprocessors/service providers: [Insert current list or link to subprocessor page, if published]

International transfers

We may transfer personal data to countries outside the country where you are located, including to the United States and other countries where we or our service providers operate. Where required by law, we use appropriate safeguards for those transfers, such as standard contractual clauses, adequacy decisions or other recognised transfer mechanisms.

How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including to meet legal, regulatory, tax, accounting, security and reporting requirements, and to resolve disputes or enforce agreements.

Our standard retention periods are:

• website analytics and cookie records: [insert period];
• general enquiries and contact form submissions: [insert period];
• client and supplier records: [insert period];
• recruitment and candidate records: [insert period];
• marketing suppression records: [insert period]; and
• security logs and investigation records: [insert period].

When personal data is no longer required, we delete it, anonymise it or securely archive it where lawful and necessary.

Security

We use appropriate technical and organisational measures designed to protect personal data. These may include access controls, authentication measures, encryption where appropriate, system monitoring, backups, staff training, vendor due diligence and internal security policies. No system can be guaranteed to be completely secure, but we take reasonable steps to protect the personal data we hold.

Your rights

Depending on your location and the law that applies, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing, including direct marketing;
• request portability of personal data you have provided to us; and
• withdraw consent where processing is based on consent.

If you are a California resident, you may also have rights under California privacy law, including the right to know, delete and correct certain personal information, and the right not to be discriminated against for exercising your privacy rights. Any rights available to you will depend on the applicable law and the circumstances of the processing.

To exercise your rights, contact us using the details below. We may need to verify your identity before responding.

Children’s privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal data from children under 13 through our website. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to review and delete it where necessary.

Data breaches

If we become aware of a personal data breach, we will investigate it, take appropriate steps to contain and remediate it, and notify affected individuals and regulators where required by applicable law.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Where required by law, we will provide additional notice of material changes.

Contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact:

ConsultAdd Inc.
Website: consultadd.com
Email: legal@consultaddpublicservices.com
Phone: 8887719958
Address: 175 Greenwich St, 38^th Floor, New York City, New York, 10007