Privacy Policy

How we collect, use, and protect your personal data.

Last updated: February 2025

1. Introduction

SHE Consulting — Success in Healthcare Education ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website www.sheconsulting.co.uk or engage with our services, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Data Controller

The data controller responsible for your personal data is:

  • Company: SHE Consulting (Success in Healthcare Education)
  • Email: admin@sheconsulting.co.uk
  • Locations: Doncaster, Hull, London (UK) and India

If you have any questions about this Privacy Policy or our data practices, please contact us at admin@sheconsulting.co.uk.

3. Information We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide to Us

  • Contact information: name, email address, telephone number, organisation name, and job title when you contact us via email or our website.
  • Event registration data: name, email address, organisation, dietary or accessibility requirements, and payment information when you register for our events.
  • Consultation enquiries: details you provide when requesting information about our consulting services.
  • Correspondence: any personal data contained in correspondence you send to us.

3.2 Information We Collect Automatically

  • Technical data: IP address, browser type, operating system, referring URL, pages visited, time spent on pages, and other diagnostic data.
  • Cookie data: information collected through cookies and similar technologies (see our Cookie Policy).

4. How We Use Your Information

We use your personal data for the following purposes and on the following lawful bases under UK GDPR:

Purpose Lawful Basis
Responding to enquiries and providing consulting services Performance of a contract / Legitimate interests
Processing event registrations and payments Performance of a contract
Sending service-related communications Legitimate interests
Website analytics and improvement Legitimate interests / Consent
Complying with legal obligations (e.g. anti-money laundering) Legal obligation

5. Data Sharing

We do not sell your personal data. We may share your data with:

  • Service providers: payment processors, IT support providers, and hosting providers who assist in operating our website and services, under appropriate data processing agreements.
  • Professional advisors: lawyers, accountants, and auditors where necessary.
  • Regulatory authorities: where required by law or regulation.

6. International Transfers

SHE Consulting operates in both the UK and India. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR, including standard contractual clauses approved by the Information Commissioner's Office (ICO) or ensuring the recipient country provides an adequate level of data protection.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typical retention periods are:

  • Enquiry data: 2 years from last contact
  • Client/contract data: 6 years after the end of the contract (in line with the Limitation Act 1980)
  • Event registration data: 2 years from the event date
  • Financial records: 6 years (in line with HMRC requirements)

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — to request a copy of the personal data we hold about you.
  • Right to rectification — to request correction of inaccurate or incomplete data.
  • Right to erasure — to request deletion of your data in certain circumstances.
  • Right to restrict processing — to request limitation of how we use your data.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at admin@sheconsulting.co.uk. We will respond within one month of receiving your request.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include secure hosting, HTTPS encryption, access controls, and regular security reviews.

10. Cookies

Our website uses cookies and similar technologies. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites (such as LinkedIn). We are not responsible for the privacy practices of these external sites and encourage you to read their respective privacy policies.

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.