Legal

Privacy Policy

Last updated: [DD Month YYYY]

[Have this policy reviewed before launch. It is a starting template, not legal advice.]

Ostrell Consulting [Ltd] (“Ostrell”, “we”, “us”) is the controller of personal data collected through this website. We are registered in England and Wales, company number [XXXXXXXX], registered office [Registered office address]. Contact us at hello@example.com.

What we collect

  • Enquiries: name, work email, company, phone number (optional), the topics you select and your message when you use our contact form or email us.
  • Job applications: the CV and details you send us.
  • Technical data: our hosting provider (Microsoft Azure) processes IP addresses and request logs to deliver and secure the site.

Why we use it and our lawful basis

PurposeLawful basis (UK GDPR)
Replying to your enquiry and discussing servicesLegitimate interests, or steps before entering a contract
Considering job applicationsLegitimate interests
Keeping the website secureLegitimate interests
Sending insights or newsletters (only if you opt in)Consent

Who we share it with

We use trusted processors to run this website and handle email: Microsoft (Azure hosting) and [email delivery provider, e.g. Resend]. We do not sell your data.

International transfers

Where a processor stores data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement / Addendum.

How long we keep it

Enquiries: up to [24 months] after our last contact. Unsuccessful job applications: up to [6 months]. Client records: as required for contracts and tax law.

Your rights

You can ask to access, correct, erase or restrict your data, object to our use of it, or request a copy in a portable format. Email hello@example.com. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

See our cookie policy.