Legal
Privacy Policy
Last updated: October 2026
This policy explains how Harley Governance collects, uses and protects personal data. We are registered with the Information Commissioner's Office and are committed to handling information in line with UK GDPR and the Data Protection Act 2018.
1. Data We Collect
We collect information you provide directly, such as your name, organisation, email and enquiry details when you submit a strategic briefing or contact us. We may also collect limited analytics data about how you use this site.
When you become a client, we may process additional information necessary to deliver advisory services, including operational and governance documentation you share with us.
2. How We Use Your Data
We use your data to respond to enquiries, deliver and manage engagements, maintain records, and where you have agreed, send relevant updates. We do not sell your personal data.
3. Legal Basis
We process personal data on the basis of your consent, the performance of a contract, our legitimate interests as a consultancy, and compliance with legal and regulatory obligations.
4. Sharing & Sub-processors
We may share data with trusted service providers who help us operate, such as hosting and email platforms, under appropriate data processing agreements. We only disclose data where required by law.
5. Retention
We retain personal data only for as long as necessary for the purposes set out in this policy and to meet regulatory or legal requirements. Client records are retained in line with our document retention schedule.
6. Your Rights
You have rights to access, correct, restrict, port or erase your personal data, and to object to certain processing. You can also withdraw consent at any time. To exercise these rights, contact us at info@hgov.co.uk.
7. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure.
8. Contact
If you have a concern about how we handle your data, please contact us at info@hgov.co.uk. You also have the right to raise a complaint with the Information Commissioner's Office.