Legal

Privacy Policy

This policy explains how TLN Advisory collects, uses and protects personal data, and sets out your rights in relation to that data under UK data protection law.

Last updated: May 2025

Who we are

TLN Advisory is an independent transformation, technology and risk advisory practice based in the United Kingdom. For the purposes of UK data protection law, TLN Advisory is the data controller responsible for the personal data described in this policy.

This policy applies to personal data we collect through this website, through enquiries and correspondence, and in the course of providing advisory services. If you have any questions about how we handle your data, please contact us using the details at the end of this policy.

The data we collect

We collect only the personal data we need in order to respond to enquiries, provide our services and operate this website. Depending on how you interact with us, this may include:

  • Identity and contact details, such as your name, organisation, role, email address and telephone number.
  • The content of any enquiry or correspondence you send to us.
  • Information you choose to share with us in the course of a discussion or engagement.
  • Technical and usage data collected automatically when you visit this website, such as your device type, browser and pages viewed.

Website analytics

We use privacy-conscious analytics to understand how this website is used and to improve its content and performance. This data is collected in aggregate and is used to measure metrics such as the number of visitors and the pages they view.

We do not use analytics data to identify individual visitors, and we do not sell or share this data with third parties for advertising purposes.

Contact form and enquiry submissions

When you submit an enquiry or contact us, we use the information you provide solely to respond to you, to discuss how we may be able to help, and, where relevant, to provide our services. Enquiries are treated as confidential and are handled with discretion.

We will not use the contact details you provide for unrelated marketing without your consent, and you may ask us to stop contacting you at any time.

Lawful basis for processing

We process personal data only where we have a lawful basis to do so under UK GDPR. Depending on the circumstances, the relevant basis will be one of the following:

  • Legitimate interests — to respond to enquiries, to provide and manage our services, and to operate and improve our website, where this is not overridden by your interests or rights.
  • Performance of a contract — where processing is necessary to provide services we have agreed to deliver.
  • Consent — where you have given us clear consent to process your data for a specific purpose, which you may withdraw at any time.
  • Legal obligation — where we are required to process data to comply with the law.

How we protect your data

We take the security and confidentiality of personal data seriously and apply appropriate technical and organisational measures to protect it against unauthorised access, loss or misuse. Access to personal data is limited to those who need it for the purposes described in this policy.

Data retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, including to meet any legal, regulatory or professional record-keeping requirements.

Where data is no longer required, we will delete it or anonymise it securely. Enquiry correspondence that does not lead to an engagement is retained only for as long as is reasonably necessary and is then deleted.

Your rights

Under UK data protection law, you have a number of rights in relation to your personal data. These include:

  • The right to be informed about how your data is used.
  • The right to access the personal data we hold about you.
  • The right to request correction of inaccurate or incomplete data.
  • The right to request erasure of your data in certain circumstances.
  • The right to restrict or object to processing in certain circumstances.
  • The right to data portability where applicable.
  • The right to withdraw consent where processing is based on consent.

Complaints

If you have a concern about how we have handled your personal data, we would encourage you to contact us first so that we can address it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

Contact information

If you have any questions about this policy, or wish to exercise any of your rights, please contact TLN Advisory by email. We will respond to all reasonable requests within the timeframes required by law.