Privacy & Cookies

Last updated: 29 September 2026

Oak Consult Limited takes the privacy and security of personal information seriously.

This notice explains how we collect, use, store and protect personal information when you visit our website, contact us, subscribe to communications, become a client or otherwise interact with Oak Consult.

Oak Consult Limited is the data controller for the personal information described in this notice.

You can contact us using the details provided on our Contact Us page.

1. The information we collect

The personal information we collect depends on how you interact with us.

It may include:

  • your name;
  • job title and organisation;
  • email address;
  • telephone number;
  • postal or business address where relevant;
  • information you provide through our contact or enquiry forms;
  • information you provide during conversations, meetings or correspondence;
  • your preferences relating to newsletters or other communications;
  • information associated with a client, prospect or supplier relationship;
  • technical information relating to your use of this website, such as browser, device and website usage information.

We do not intentionally collect special category personal data through this website. Please do not include sensitive personal information in website enquiry forms unless it is genuinely necessary.

2. How we collect information

We may collect personal information:

  • directly from you when you contact us;
  • when you complete a website form;
  • when you subscribe to our newsletter or other communications;
  • when you become or enquire about becoming a client;
  • through normal business correspondence, meetings and conversations;
  • from publicly available business sources where appropriate;
  • through website analytics and similar technologies;
  • through service providers acting on our behalf.

Where we obtain personal information from somewhere other than you, we will only use it where we have a lawful basis to do so and where that use is reasonable and proportionate.

3. How we use personal information

We may use personal information to:

  • respond to enquiries;
  • arrange initial conversations and meetings;
  • provide consultancy and other services;
  • manage client and supplier relationships;
  • prepare proposals, contracts and related commercial documentation;
  • manage billing and financial records;
  • provide requested information, reports or materials;
  • send newsletters or other marketing communications where permitted;
  • maintain and improve our website;
  • understand how visitors use the website;
  • protect our systems, website and business;
  • meet legal, regulatory, accounting and contractual obligations;
  • establish, exercise or defend legal claims where necessary.

We will not use personal information for purposes that are incompatible with the reason it was originally collected unless permitted by law.

4. Our lawful bases for processing

UK data protection law requires us to have a lawful basis for using personal information.

Depending on the circumstances, Oak Consult may rely on:

Contract

Where processing is necessary to enter into or perform a contract with you or your organisation.

This may include providing services, responding to requests connected with a potential engagement or managing an existing client relationship.

Legitimate interests

We may process personal information where this is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

These interests may include:

  • responding to business enquiries;
  • developing and managing client and prospect relationships;
  • operating and improving Oak Consult;
  • maintaining website security;
  • understanding how our website and services are used;
  • communicating with existing business contacts where it is reasonable to do so.

Where we rely on legitimate interests, we consider the purpose of the processing, its necessity and its potential impact on individuals.

Consent

We may rely on consent where you have actively chosen to receive particular communications or where consent is required for the use of certain cookies or similar technologies.

You may withdraw consent at any time.

Legal obligation

We may process personal information where necessary to comply with legal, regulatory, tax, accounting or other statutory obligations.

5. Marketing and newsletters

If you choose to subscribe to our newsletter or other marketing communications, we may use your contact details to send you relevant Oak Consult news, articles, insights, whitepapers and service information.

Where consent is required, we will obtain it before sending these communications.

In some business-to-business circumstances, we may rely on legitimate interests where permitted by law.

You can unsubscribe at any time using the unsubscribe facility included in marketing emails or by contacting us.

Withdrawing consent or unsubscribing from marketing will not prevent us from contacting you about an existing client engagement, contractual matter or enquiry where necessary.

6. Contact forms and enquiries

When you submit an enquiry through this website, we use the information provided to understand your enquiry, respond to you and determine whether Oak Consult may be able to help.

Submitting an enquiry does not automatically subscribe you to marketing communications.

Where the form includes an optional newsletter or marketing box, we will use that preference separately.

7. Who we share information with

We do not sell personal information.

We may share information with trusted service providers where necessary to operate our business or provide services.

These may include organisations providing:

  • website hosting and technical support;
  • email and communication services;
  • newsletter and mailing services;
  • website analytics;
  • secure file storage and business software;
  • accounting and professional services;
  • IT and security services.

These organisations may process personal information on our behalf and are expected to protect it appropriately and only use it for authorised purposes.

We may also disclose personal information where required by law, regulation, court order or another lawful authority, or where necessary to protect our legal rights or those of others.

8. International transfers

Some technology and service providers used by Oak Consult may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate level of protection is in place.

This may include relying on:

  • UK adequacy regulations;
  • recognised contractual safeguards;
  • other transfer mechanisms permitted under UK data protection law.

Where appropriate, you may contact us for further information about the safeguards used.

9. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet any legal, contractual, accounting or regulatory requirements.

Retention periods vary depending on the type of information and the nature of our relationship with you.

For example:

  • enquiry information will normally be retained only while it remains relevant to a potential or developing business relationship;
  • client records may be retained for longer where required for contractual, tax, accounting or legal purposes;
  • marketing information may be retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to retain it;
  • technical and website information will be retained only for as long as reasonably necessary for operational, security or analytical purposes.

We periodically review the information we hold and delete or anonymise information that is no longer required.

10. Security

We use appropriate technical and organisational measures designed to protect personal information against:

  • unauthorised access;
  • loss;
  • misuse;
  • alteration;
  • disclosure;
  • accidental or unlawful destruction.

No internet-based service can guarantee absolute security, but we take reasonable steps appropriate to the nature of the information we process and the risks involved.

11. Your data protection rights

Depending on the circumstances, UK data protection law gives you rights in relation to your personal information.

These may include the right to:

  • ask for access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase information in certain circumstances;
  • ask us to restrict the way we use information;
  • object to certain types of processing;
  • receive certain information in a portable format;
  • withdraw consent where processing is based on consent;
  • object to direct marketing at any time.

These rights are not absolute and may depend on the circumstances and lawful basis under which the information is processed.

If you wish to exercise a right, please contact Oak Consult using the details on our Contact Us page.

We may need to verify your identity before responding.

12. Your right to object

You have the right to object to processing based on legitimate interests in certain circumstances.

You also have an absolute right to object to the use of your personal information for direct marketing.

If you object to direct marketing, we will stop using your personal information for that purpose.

13. Complaints

If you are concerned about how Oak Consult has handled your personal information, please contact us first so that we have an opportunity to address the issue.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Further information is available from the Information Commissioner’s Office website at ico.org.uk.

14. Cookies and similar technologies

Our website may use cookies and other storage or access technologies.

Cookies are small files or pieces of information stored on or accessed from your device when you visit a website.

Similar technologies may include scripts, tags, web storage and other technologies used to operate, secure, measure or improve websites.

Strictly necessary technologies

Some technologies are required for the website to operate correctly or securely.

These may be used without consent where permitted by law.

Analytics and statistical technologies

We may use analytics technologies to understand how visitors use the Oak Consult website and to improve its content, structure and performance.

Current UK law allows some technologies used solely for statistical purposes to operate without prior consent where the relevant legal conditions are met.

Where we rely on this exception, we will:

  • use the information solely for statistical purposes and website improvement;
  • provide clear information about the use of the technology;
  • provide a simple and free way for users to object where required;
  • avoid using the information for advertising, profiling or unrelated purposes.

Where analytics use falls outside an applicable exemption, we will seek consent before placing or accessing the relevant technology.

Other non-essential technologies

Where cookies or similar technologies are used for purposes that require consent, they will not be activated until you have made an appropriate choice.

Where applicable, you will be able to change or withdraw your cookie preferences.

15. Third-party services and links

Our website may contain links to other websites or services, including social media platforms and third-party resources.

Oak Consult is not responsible for the privacy practices of organisations operating those external websites.

If you follow an external link, you should review the privacy information provided by that organisation.

The presence of a link does not mean that Oak Consult controls how the external organisation collects or uses personal information.

16. Changes to this notice

We may update this Privacy & Cookies notice from time to time to reflect:

  • changes to our services;
  • changes to technology;
  • changes to the way we process personal information;
  • changes to applicable law or regulatory guidance.

The latest version will always be published on this page together with the date it was last updated.

17. Contacting Oak Consult

If you have any questions about this notice, the way Oak Consult uses personal information, or your data protection rights, please contact us through our Contact Us page.

Oak Consult Limited
United Kingdom