Privacy Policy

McM Consulting is a sole trader consultancy registered in the United Kingdom, operated by Myles McMorrow.

Who is collecting the data

McM Consulting (referred to throughout as "the practice", "I", or "me").

Contact for any privacy query: myles@mcmorrowconsulting.co

What data is collected

I collect personal data through three channels.

Fit-call enquiry form. When you open a brief through the website, you provide your name, email address, company, role, a one-sentence event context, expected event timeline, the kind of help you are exploring, and where you heard about the practice. All fields are voluntary other than name and email.

Email enquiries. When you contact me directly via email, the message and any information you choose to include forms part of the personal data I hold.

Website analytics. I use Vercel Web Analytics, a privacy-friendly analytics service that does not set tracking cookies, does not collect personal identifiers, and aggregates traffic data only. No individual user data is captured.

How I use the data

Personal data is used for the purposes for which it was provided. Specifically:

• Responding to enquiries and arranging fit calls
• Scoping potential engagements
• Sending proposals, contracts, and follow-up communications
• Maintaining a record of the conversation in case it resumes later
• Improving the practice and the website over time

I may send marketing communications about the practice from time to time. These include campaign-based outreach, updates on new services or offers, occasional content of professional interest, and notifications about new case studies or speaking engagements.

Marketing communications are sent on the legal basis of legitimate interest (for existing prospects, clients, and professional contacts) or explicit consent (for newer contacts and where required by law). You can opt out at any time using the unsubscribe link in any marketing email, or by emailing myles@mcmorrowconsulting.co. Once you opt out I will not send you further marketing communications.

I do not sell, rent, or share personal data with any third party for marketing purposes.

Legal basis for processing

Under UK GDPR, the legal basis for processing your personal data is one or more of the following:

• Legitimate interest. Responding to your enquiry and scoping a possible engagement is a legitimate business interest both for the practice and for you as the enquirer.
• Consent. Where applicable, I rely on consent (for example, when you submit information through the website fit-call form).
• Contract performance. If you enter into a paid engagement with the practice, processing your data is necessary for the performance of that contract.

Third-party services

The practice uses the following third-party services that may process your personal data on its behalf.

• Cal.com. Used to schedule fit calls and pilot briefs. When you book, Cal.com collects your name, email, and any answers to intake questions. Cal.com's own privacy policy applies to the data they hold. See cal.com/privacy.
• Google Workspace. Email correspondence and document storage. Google's privacy policy applies. See policies.google.com/privacy.
• Vercel Web Analytics. Cookieless website analytics, aggregated and anonymised. See vercel.com/legal/privacy-policy.

I do not share your data with any other third party except where required by law.

Cookies

This website does not set tracking cookies. The analytics service used (Vercel Web Analytics) is cookieless by design.

How long the data is kept

Enquiry data is retained for as long as the enquiry remains active and for a reasonable period afterwards (typically up to 24 months) in case the conversation resumes. Engagement data is kept for the duration of the contract and for six years afterwards in line with UK statutory record-keeping requirements for sole traders.

If you ask me to delete your data, I will do so unless I am required to retain it for legal or accounting reasons.

Your rights under UK GDPR

You have the following rights regarding your personal data:

• Access. You can request a copy of the personal data I hold about you.
• Rectification. You can ask me to correct inaccurate data.
• Erasure. You can ask me to delete your data (subject to legal retention obligations).
• Restriction. You can ask me to limit how I use your data.
• Objection. You can object to processing on legitimate interest grounds.
• Portability. You can ask for your data in a transferable format.
• Withdraw consent. Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email myles@mcmorrowconsulting.co. I will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

Changes to this policy

I update this policy when the practice changes how it processes data or when the law changes. The date at the top reflects the last update. Material changes will be flagged on the page for a reasonable period.

Contact

For any privacy query, data request, or concern, email myles@mcmorrowconsulting.co.