Introduction
Alex Leathard, trading as Hecaton Consulting (“Hecaton”, “I”, “me”, and “my”) provides professional services relating to data, analytics, and AI. I respect your privacy and am committed to protecting your personal data. This Privacy Policy (“Policy”) explains how I collect, use, retain, and disclose personal data in connection with my website and prospective client relationships, and explains your privacy rights and how the law protects you.
Basis for compliance
I comply with the UK GDPR and the Data Protection Act 2018.
My role
I act as the data controller for the personal data covered by this Policy and am responsible for it under the UK GDPR and Data Protection Act 2018.
The personal data we collect
I may collect:
- Your name and email address
- Your company, role, and other business contact details
- Meeting booking details and information you choose to provide in advance
- Correspondence and notes relating to an enquiry or proposed engagement
- Information included in proposals and pre-contract documents, which may include a name, email address, or electronic signature
Please do not include sensitive personal information or personal data about other people.
Data classification
To manage your personal data effectively, I classify it as follows:
- Identity Data: Name
- Contact Data: Email address, company, role, and other business contact details
- Enquiry and Proposal Data: Booking details, correspondence, meeting notes, proposal information, and pre-contract document details
When I collect your data
I collect personal data when you:
- Complete the meeting-booking form or contact me about a potential engagement
- Correspond with me about an enquiry or proposal
- Provide information in connection with a proposed engagement
How I collect your data
I collect personal data through a Calendly booking form and through correspondence, including email and other communications. If I obtain your personal data from another source, I will provide any additional privacy information required separately.
How I use your data
I only use your data as the law allows. I use it to respond to business enquiries, arrange requested meetings, and prepare or discuss proposals and pre-contract documents.
Purposes for which I use your data
I use your Identity, Contact, Enquiry and Proposal Data to respond to enquiries, arrange meetings, and prepare or discuss proposals. I rely on my legitimate interests in responding to prospective clients and assessing and progressing potential business engagements. I consider those interests against your rights and expectations. I may also use or retain relevant records where necessary to comply with a legal obligation.
Service providers and disclosures
I use service providers to operate my business and handle the personal data described in this Policy. These include:
- Netlify for website hosting
- Calendly for meeting bookings
- Google Workspace for email and calendar
- HubSpot for customer relationship management
- iCloud Drive and Qwilr for proposals and related documents
These providers may process personal data on my behalf to provide their services. They may also process some information under their own terms and privacy notices.
The Cookie Policy explains cookies and similar technologies used on the website.
International transfers
Some service providers may process personal data outside the UK, including in the EU, the United States, and Australia.
Where personal data is transferred outside the UK, I use an applicable transfer mechanism under UK data-protection law.
Retention
I keep enquiry and prospect records while correspondence is active. If correspondence ends without an engagement, I delete those records within one year after it ends. I review CRM records annually and delete or anonymise records sooner where they are no longer needed. If you become a client, my continuing business and client records are handled under separate privacy information. I retain contracts and accounting records for the applicable legal retention period.
Your duty to inform me of changes
It is important that the personal data I hold about you is correct. Please keep me informed if your personal data changes during your relationship with me.
If you fail to provide personal data
Where I need personal data to respond to an enquiry or prepare a proposal and you do not provide it when requested, I may be unable to arrange a meeting or progress the proposal. I will let you know if this is the case.
Children under eighteen
My services are intended for business and professional use, not for children. I do not knowingly collect personal data from children through this website. If you believe a child has provided personal data to me, please contact me.
Your rights
Depending on the circumstances, you may have the right to request access to, correction or deletion of your personal data, restriction of its processing, or to object to processing based on legitimate interests. You can exercise these rights by emailing me at alex@hecaton.consulting.
Automated decisions
I do not make decisions about you solely by automated means that have legal or similarly significant effects, and I do not profile individuals.
Changes to this Policy
I may update this Policy from time to time. I will publish the updated version on my website and update the date below. If a change significantly affects how I use personal data, I will take appropriate steps to bring it to your attention.
Contact information
If you have questions or comments regarding this Policy, or wish to exercise your rights, please contact me at alex@hecaton.consulting.
Complaints
Should you wish to do so at any point, you have the right to make a complaint to the Information Commission (Information Commissioner's Office; ICO), the UK supervisory authority for data protection issues.
I would appreciate the opportunity to address your concerns first, so please contact me in the first instance at alex@hecaton.consulting.