Information
Privacy Notice
How Alexander Parker Advisory Limited handles personal information you share through this website and when you contact us.
Effective date: 29 October 2026
Alexander Parker Advisory Limited respects your privacy. This notice explains the personal information we collect when you visit our website, make an enquiry or communicate with us about our services, and how we use it.
1. Who is responsible for your information?
Alexander Parker Advisory Limited is the data controller for the activities described in this notice.
- Registered in England and Wales, company number 13586478.
- Registered office: 59 Richmond Road, Bewdley, Worcestershire, DY12 2BG, United Kingdom. This is a registered office, not a customer-facing office.
- Email: alexander@alexanderparkeradvisory.ltd
- Telephone: +44 7932 763544
You can use the email address above for any question about your privacy or to exercise your data protection rights. Alexander Parker handles these enquiries on behalf of the company.
2. Information we collect
When you contact us through our website, we collect your name, email address, optional telephone number, selected enquiry category and the contents of your message. If you contact us by email, telephone or another agreed channel, we also collect the information you give us and relevant correspondence.
If you become a client, we may need further information relevant to the agreed work, such as contact details, business correspondence, project documents and invoicing information. We will explain any additional or particularly sensitive information requirements as part of the engagement.
Our hosting provider may also process limited technical information, such as IP addresses and website request information, to deliver and protect the website. This does not mean that we use the site for personalised advertising.
Please do not include sensitive personal, medical, financial or highly confidential information in an initial website enquiry. We can agree an appropriate method for exchanging additional documents if needed.
3. Why we use information and our lawful bases
We use personal information for the following purposes, applying the lawful basis appropriate to the circumstances:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and discussing proposed services with an individual | Taking steps at the individual’s request before entering a contract, where applicable; otherwise our legitimate interests in answering legitimate enquiries |
| Communicating with an employee or representative of a business that contacts us | Our legitimate interests in responding and managing relevant business communications |
| Carrying out an agreed engagement | Performance of a contract with an individual client, where applicable; our legitimate interests in fulfilling business agreements and keeping relevant communications where the client is an organisation |
| Producing invoices, maintaining accounting records and meeting applicable legal duties | Compliance with legal obligations |
| Maintaining website security, preventing misuse and establishing, exercising or defending legal rights | Our legitimate interests in securing our systems, managing risk and protecting our business and the rights of others |
Where we rely on legitimate interests, we consider the purpose of the processing and its likely impact on individuals.
We do not use contact-form enquiries to send unsolicited marketing emails, sell contact information or make solely automated decisions about individuals with legal or similarly significant effects.
4. Who receives information?
Information may be accessed or processed by:
- Netlify, which hosts the website and processes and stores messages submitted using Netlify Forms.
- Google Workspace (Gmail), which is used to receive and handle enquiries and business correspondence.
- Relevant accounting, IT or professional advisers, when their involvement is necessary and appropriate for the agreed work or legal duties.
- Authorities or other recipients where disclosure is required by law.
We do not disclose client or supplier identities or confidential commercial information to third parties without an appropriate basis or permission, except where legally required. We do not sell personal information.
5. Information processed outside the UK
The service providers we use may process personal information outside the UK, including in the United States. Based on their published data processing terms:
- Netlify (Netlify, Inc., United States) acts as our processor. Its Data Processing Agreement states that Netlify and its sub-processors may process data outside the UK. For UK personal data, it relies on Netlify’s certification to the EU-U.S. Data Privacy Framework and its UK Extension (sometimes called the UK-US “data bridge”), with the UK International Data Transfer Addendum to the EU standard contractual clauses applying if that certification ceases to apply. Netlify publishes its sub-processors and their locations at netlify.com/legal/subprocessors.
- Google Workspace acts as our processor under Google’s Cloud Data Processing Addendum, which states that data may be processed in any country where Google or its sub-processors maintain facilities. For UK personal data transferred to the United States, Google LLC relies on its certification to the UK Extension to the EU-U.S. Data Privacy Framework. For other restricted transfers, the addendum provides for standard contractual clauses.
The UK Government has recognised the UK Extension to the EU-U.S. Data Privacy Framework as providing adequate protection for transfers to certified US organisations. You can ask us for more information about these safeguards using the contact details in section 1.
6. How long we keep information
- Enquiries that do not become engagements: normally no longer than 12 months after the last meaningful contact, and less if we no longer need the information.
- Active clients and projects: while information is needed to provide services, maintain appropriate records and meet legitimate obligations arising from the engagement. Where additional retention is needed after completion, it will be based on the record type, potential claims and applicable legal obligations.
- Company accounting and financial records: generally for six years from the end of the company financial year to which they relate, or longer where the law requires.
We review enquiry records every three months and remove information that has passed its retention period from Netlify Forms and Google Workspace, subject to any valid reason to retain it for longer. Deletion from backups may follow the relevant provider’s documented backup processes.
7. Protecting information
We take reasonable technical and organisational steps to restrict access to personal information and to reduce the risk of unauthorised access, loss or misuse. No internet or email system can be guaranteed completely secure. If you need to send sensitive information, contact us first so we can agree a suitable method.
8. Your data protection rights
Depending on the circumstances, you may have rights to request access to your personal information, correction of inaccurate data, erasure, restriction of processing and data portability.
You also have the right to object to processing based on our legitimate interests. We will consider such requests in accordance with applicable law.
To make a request, email alexander@alexanderparkeradvisory.ltd. We may need to check your identity before disclosing personal information.
9. Data protection complaints
You can complain directly to us at alexander@alexanderparkeradvisory.ltd or by writing to our registered office. We will acknowledge a data protection complaint within 30 days of receiving it, investigate appropriately, keep you informed as needed and explain the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. You do not have to wait for our response before contacting the ICO.
For more information, see our Complaints & Feedback page.
10. Cookies and website technology
We aim to keep this website simple and respectful of visitor privacy. We do not intentionally use visitor-tracking or advertising cookies. The website’s own code does not set cookies, does not use browser storage and does not load Google Analytics, advertising pixels or other third-party tracking scripts. Its fonts, styles and scripts are served from this website.
We use Google Search Console and available Netlify operational statistics to understand technical and search performance. These do not involve installing marketing trackers in visitors’ browsers.
Our hosting and form provider may use technical measures that are necessary to deliver the website and protect enquiry submissions, such as automated spam filtering. We check the live website for any cookies or similar technologies and will update this section if any are found.
If we introduce technologies that require consent, we will explain their purpose and put appropriate choices in place before using them. You can also manage or delete cookies using your browser settings.
11. Updates to this notice
We may update this notice if our services, suppliers or legal obligations change. The date at the top will show when the revised notice takes effect. We will provide additional information when required before using personal information for a new purpose.