1. Introduction

Descartes Consulting Ltd. respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and protect information about you when you visit our website, make an enquiry, or engage our consulting services.

2. Information we collect

We may collect and process the following types of personal information:

Identity: Your name, job title, and company name.

Contact: Business email address, phone number, or correspondence details.

Website: IP address, browser type, and browsing behaviour (via cookies or analytics tools).

Engagement: Information you provide when contacting us, completing forms, or subscribing to updates.

We do not collect sensitive personal data unless you explicitly provide it for legitimate business purposes.

3. How we use your information

We use your personal data to:

• Respond to your enquiries and provide consulting services.  

• Send relevant updates or marketing communications (if you’ve opted in).  

• Improve our services, website experience, and business operations.  

• Meet legal, regulatory, or contractual obligations.  

4. Lawful basis for processing

We process your data under one or more of the following grounds:

Performance of a contract: To deliver the consulting services you’ve requested.

Legitimate interests: To operate our business and communicate with clients effectively.

Consent: Where you’ve agreed to receive marketing materials.

Legal obligation: Where required by law or regulation.

5. Data sharing and security

We only share your personal data with trusted service providers (e.g. email, CRM, or analytics tools) who are bound by confidentiality agreements and GDPR compliance. We do not sell, rent, or trade your data.

We use up‑to‑date technical and organisational measures to protect your information against unauthorised access or misuse.

6. Data retention

We retain your data for as long as necessary to fulfil the purpose it was collected for, including any legal, accounting, or reporting requirements. Marketing data is retained until you withdraw consent.

7. Your rights

Under UK GDPR, you have the right to:

• Access your personal data and receive a copy.

• Request correction or deletion (“the right to be forgotten”).

• Withdraw consent for marketing communications at any time.

• Object to processing or request data portability.

You can exercise these rights at any time by contacting us at l[email protected].

8. Cookies

Our website uses cookies to improve your browsing experience and analyse traffic. You can set your browser to refuse all or some cookies.

9. Changes to this policy

We may update this policy periodically. The current version will always be available on our website with the effective date shown above.

10. Contact us

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

[email protected] or [email protected]