Privacy Policy

Effective Date: September 10th 2025
Last Updated: October 1st 2025

Nirbhau Consultancy (“we,” “our,” “us”) is committed to protecting the privacy and security of our website visitors, clients, and partners. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and international information security standards including ISO/IEC 27001.

By using our website and services, you consent to the practices described in this policy.

1. Information We Collect

We may collect and process the following types of personal data:

  • Identity Data: name, title, organisation.
  • Contact Data: email address, telephone number, postal address.
  • Professional Data: role, company details, service enquiries.
  • Technical Data: IP address, browser type, operating system, device information, cookies.
  • Usage Data: information about how you use our website and services.
  • Communications Data: correspondence, feedback, and preferences.

We do not knowingly collect special category data (e.g., health, race, religion) unless strictly necessary and with explicit consent.

2. How We Use Your Information

We use personal data for the following lawful purposes:

  • To provide consultancy services and respond to enquiries (Contractual necessity).
  • To manage client relationships and service delivery (Legitimate interest).
  • To send updates, insights, and marketing communications where consent is provided (Consent).
  • To maintain website security and performance (Legitimate interest).
  • To comply with legal and regulatory obligations (Legal obligation).

3. Data Sharing & Transfers

We do not sell or trade your personal information. We may share data with:

  • Service Providers: IT, cloud hosting, CRM, email, and website analytics providers.
  • Professional Advisors: legal, financial, and compliance partners.
  • Regulatory Authorities: where legally required.

Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or European Commission-approved Standard Contractual Clauses (SCCs).

4. Data Security

We apply ISO/IEC 27001-aligned controls and best practices to protect personal information, including:

  • Encryption in transit and at rest.
  • Access controls with least privilege principles.
  • Regular security monitoring and vulnerability assessments.
  • Staff training in data protection and confidentiality.

5. Data Retention

We retain personal data only as long as necessary to fulfil the purposes outlined in this policy, including satisfying legal, accounting, or reporting requirements.

  • Client data: typically retained for 7 years after contract completion.
  • Marketing data: retained until you withdraw consent or unsubscribe.
  • Website logs: retained for up to 12 months for security purposes.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right to access – obtain a copy of your personal data.
  • Right to rectification – correct inaccurate or incomplete data.
  • Right to erasure – request deletion (“right to be forgotten”).
  • Right to restriction – limit processing of your data.
  • Right to portability – receive your data in a structured, machine-readable format.
  • Right to object – to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent – at any time where processing is based on consent.

To exercise these rights, please contact us using the details below.

7. Cookie Policy

This explains how Nirbhau Consultancy (“we,” “our,” “us”) uses cookies and similar technologies on our website.

7.1. What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us improve functionality, enhance security, and provide a better browsing experience. Cookies can be “session” cookies (deleted when you close your browser) or “persistent” cookies (remain until they expire or you delete them).

7.2. Types of Cookies We Use

We use the following categories of cookies:

  1. Strictly Necessary Cookies
    • Required for the operation of our website.
    • Examples: security, load balancing, navigation.
    • These cannot be switched off.
  2. Performance & Analytics Cookies
    • Help us understand how visitors use our website (e.g., which pages are visited most).
    • Used to improve functionality and user experience.
    • Example: Google Analytics (configured with IP anonymisation in line with UK GDPR).
  3. Functionality Cookies
    • Enable enhanced features such as remembering preferences (e.g., language settings).
    • May be set by us or third-party providers.
  4. Targeting / Advertising Cookies(if applicable)
    • Track browsing habits to deliver relevant marketing.
    • Only used if you consent.

7.3. Third-Party Cookies

Some cookies may be placed by trusted third parties (e.g., analytics providers, embedded content such as LinkedIn, YouTube, or other social media). We do not control these cookies directly.

7.4. Managing Cookies

You can:

  • Accept or reject cookies via the cookie banner when first visiting our website.
  • Withdraw consent at any time by updating cookie preferences in your browser settings.
  • Block or delete cookies through your browser controls, but this may impact website functionality.

Guidance on managing cookies in popular browsers:

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies separately.

9. Updates to This Policy

We may update this Policy from time to time. Changes will be posted on this page with an updated “Effective Date.”

10. Contact Us

For questions or to exercise your data protection rights, please contact:

Nirbhau Consultancy
Email: data@nirbhauconsultancy.co.uk

11. Complaints

If you are unsatisfied with how we handle your data, you may lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority:
https://ico.org.uk/make-a-complaint/