PRIVACY POLICY

This privacy policy describes how we will collect and use your personal data. Please read it carefully, and if you have any questions, please get in touch with us at rachel.livermore@nv-consulting.co.uk

CONTACT DETAILS

Our site https://www.nv-consulting.co.uk/ is owned and operated by Nidd Valley Consulting Ltd, a limited company registered in England under company number 15064902, whose registered address is 44 Kirkgate, Ripon, North Yorkshire, HG4 1PB.  Our ICO registration number is ZB598826.

DATA WE COLLECT & HOW

We currently collect and process the following information:

  • Identity data: name, title,

  • Contact data: address, email address(es), telephone number, mobile phone number.

  • Financial data: payment history, bank account details, invoice details

  • Business data: business name, job title, profession, business address

  • Health data: well-being, maternity and postnatal information.

  • Coaching data: signed coaching agreement; reflection notes.

  • Technical data: IP address, browser type and version, operating system.

HOW WE USE YOUR PERSONAL DATA
(and the legal basis for processing)

Most of the personal data we process is provided directly by you. Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing this information. The table below lists the processing purposes and the lawful basis.

We may also process some personal information indirectly from the following sources:

  • Organisations where we act as a trustee

  • Organisations where we act as an external coach

  • NHS Trusts to organise pro-bono coaching sessions

  • Your public LinkedIn profile

  • Your contact details made public on your company webpage

WHO DO WE SHARE YOUR DATA WITH?

We may share your personal information with the following third parties:

If any of your personal data is shared with a third party, as described above, we will ensure that it is handled safely and securely and in accordance with your rights, our obligations and the third party’s obligations under the UK GDPR.

Your personal data may be transferred to a third party if we sell, transfer, or merge parts of our business or assets.  Any new owner of our business may continue to use your personal data in the same way(s) that we have used it, as specified in this Privacy Notice.

DO WE TRANSFER YOUR DATA OUT OF THE UK?

We store all your personal data in the UK, except for those individuals we support via the Positive Intelligence App, for whom data is transferred to the United States (US). The US is known as a “third country,” and to transfer the data, Positive Intelligence relies on EU Standard Contract Clauses as the transfer mechanism.

HOW DO WE STORE YOUR PERSONAL DATA?

The security of your personal data is essential to us, and to protect your data, we take several necessary measures, including the following:

  • Limiting access to your personal data to those employees, agents, contractors, and other third parties with a legitimate need to know and ensuring that they are subject to duties of confidentiality.

  • Procedures for dealing with data breaches (the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, your personal data), including notifying you and/or the Information Commissioner’s Office where we are legally required.

  • All devices are protected against malware and are regularly scanned.

  • We use role-based permissions to grant access to our systems.

  • We have data processing agreements with all third-party vendors who process personal data on our behalf.

  • All devices are encrypted.

  • Staff receive regular data protection and cybersecurity training.

  • All policies and procedures are reviewed on an annual basis.

HOW LONG WILL WE RETAIN YOUR PERSONAL DATA?

We will not keep your personal data any longer than necessary, and it will be kept for the following periods:

Per our Retention and Data Disposal Policy, we will securely destroy your personal data.

WHAT ARE YOUR INDIVIDUAL RIGHTS?

Under data protection law, you have rights, including:

  • The Right of Access.  You have the right to ask us for copies of your personal information.

  • The Right to Rectification.  You have the right to ask us to rectify personal information you think is inaccurate.  You also have the right to ask us to complete information you think is incomplete.

  • The Right to be Forgotten.  You can ask us to erase your personal information in certain circumstances.

  • The Right to Restrict of Processing.  You have the right to ask us to restrict the processing of your personal data in certain circumstances.

  • The Right to Object.  You have the right to object to the processing of your personal data in certain circumstances.

  • The Right to Withdraw Consent.  If we rely on consent to process your personal data, you can withdraw that consent at any time.

  • The Right to Portability.  You have the right to ask that we transfer the personal data you gave us to another organisation or to you in certain circumstances.

You are not required to pay any charge to exercise your rights.  If you make a request, we have one month to respond.

HOW TO COMPLAIN

If you have any concerns about our use of your personal information, you can complain to us at Rachel.livermore@nv-consulting.co.uk. You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data. The ICO’s address is the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.  Alternatively, you can phone their helpline at 0303 123 1113 or complete an online form via the ICO website (https://www.ico.org.uk).

Date last reviewed: 15/04/2025