Privacy policy
This policy explains what personal data Compound Leadership Group collects, why we collect it, who we share it with, and the rights you have over it. We have kept it as short and plain as we can.
Who we are
Compound Leadership Group Ltd (we, us or our) is a boutique consultancy based in Amersham, United Kingdom. We are the data controller for the personal data described in this policy, which means we decide how and why it is used.
This policy applies whether you contact us through our website, by email, or in person.
Information we collect
Identity and contact details
Name, business name, job title, email address, phone number and postal address.
Engagement information
Details of the services you have enquired about or purchased, notes from our conversations and meetings, feedback and any complaints.
Financial information
Billing details and payment records for services you have purchased.
Website information
Aggregated information about how our website is used, such as which pages are visited and which sites people arrive from. This is not linked to you as an individual.
Enquiries through our website
When you send us a message through the contact form, your name, email address, company and message are handled by Netlify, who host our website, and are forwarded to us by email. We use those details only to reply to you.
Records
Notes of meetings, decisions and calls made during an engagement.
We do not routinely collect special category data, such as health information or racial and ethnic origin. If an engagement ever requires it, we will tell you at the time and handle it with extra care.
How we collect personal data
- Directly from you, when you contact us, fill in a form on our website, or work with us
- Automatically, when you visit our website
- From third parties, such as our service providers and people who refer you to us
- From publicly available sources, such as Companies House and LinkedIn
How we use your information
Data protection law requires us to have a legal reason for using your personal data. We rely on the following:
- Performance of a contract. To deliver our services, manage the engagement, invoice you and keep records.
- Legitimate interests. To respond to enquiries, improve our website and services, carry out research and business development, and send relevant information to business contacts. We have considered whether this could unfairly affect you and are satisfied that it does not.
- Legal duty. To meet our tax, accounting and other legal obligations.
- Consent. Where you have clearly agreed to a specific use, such as receiving marketing emails as an individual. You can withdraw consent at any time.
We may rely on more than one of these depending on the purpose. Get in touch if you would like more detail.
Who we share your information with
We share personal data only where we need to, with:
- Service providers who run our website and systems on our behalf, including our website host, our analytics provider, our email and domain provider, cloud storage and accounting software
- Professional advisers such as our accountant, insurers and legal advisers
- Regulators, courts and law enforcement, where required or permitted by law
- A buyer or their advisers, if we ever sell or merge the business
We do not sell your personal data.
Storing your information outside the UK
We store personal data in the United Kingdom. Some of our service providers are based overseas, which means your information may be transferred outside the UK. Where that happens we make sure it is protected to UK standards, either by only using countries the UK recognises as providing adequate protection, or by putting an approved contract in place with the provider.
How long we keep your information
We keep personal data only for as long as we need it to provide our services, meet our legal and tax obligations, and deal with any complaints or claims.
- Financial records are kept for six years plus the current financial year, as required by law
- Enquiries that do not lead to work are usually deleted within two years
- Engagement records are kept for six years after the engagement ends
You can ask us how long we will hold your data, and request early deletion where the law allows.
Your rights
You have the right to:
- Ask for a copy of the personal data we hold about you
- Ask us to correct information that is inaccurate or incomplete
- Ask us to delete your personal data in certain circumstances
- Ask us to restrict how we use your data
- Object to us using your data where we rely on legitimate interests, or for direct marketing
- Ask us to transfer your data to another organisation, where technically possible
- Withdraw consent at any time, where we rely on it
To exercise any of these rights, email us at camila@compoundleadershipgroup.com. We may ask you to confirm your identity. We will respond within one month, or up to three months for more complex requests.
You can opt out of marketing at any time using the unsubscribe link in any email, or by contacting us.
Making a complaint
If you are unhappy with how we have handled your personal data, please contact us first so that we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator.
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
Keeping your information safe
We use encryption for data in storage and in transit, access controls so that only those who need the information can see it, secure disposal of physical documents, and regular reviews of our systems and suppliers. Please remember that anything you choose to post publicly online can be seen and used by others.
Cookies and analytics
Our website does not use tracking or advertising cookies. We use a privacy-focused analytics tool that counts visits and page views without setting cookies or collecting information that identifies you. No cookie banner is needed because we do not store anything on your device beyond what the site needs in order to function.
Use of artificial intelligence
We use AI tools in parts of our work, for example to help with analysis, drafting and administrative tasks. Where we do, we keep human oversight of anything that matters, check outputs for accuracy, and require our providers to handle personal data in line with data protection law. Any information generated about you by these tools is treated as personal data, and all the rights in this policy still apply.
Children's data
Our services are aimed at businesses. We do not knowingly collect personal data from anyone under 13. If you believe we have, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time by posting a revised version on this page. The date at the top of the page shows when it was last changed.
Contact us
Compound Leadership Group Ltd
1 Oakfield Close, Amersham, England, HP6 5TA
camila@compoundleadershipgroup.com