Privacy Policy

TruePoint Consulting is the data controller for the personal data described in this policy. If you have any questions, you can contact us at hello@truepointconsulting.co.uk.

We may collect the following personal data when you contact us, enquire about our services, or become a client:

• Name
• Email address
• Phone number (if provided)
• Business name and details you share with us
• Payment information — for card payments, this is processed securely by Stripe and we do not store your full card details ourselves; for bank transfers, we hold the bank details needed to send or receive the payment (e.g. account name, sort code, account number)

We do not currently use tracking or analytics cookies on this website. If that changes, this policy and our Terms of Service will be updated accordingly, alongside a cookie consent banner.

We use your personal data to:

• Respond to enquiries and provide quotes
• Deliver the services you've engaged us for (e.g. building or supporting your website)
• Send invoices and process payments
• Comply with our legal and accounting obligations

We do not sell your data or use it for purposes beyond delivering our services, unless you separately agree to receive marketing from us.

We process your data on the basis of: performance of a contract (when you engage us for services), legitimate interests (responding to enquiries, running our business), and consent (where you've opted in to marketing or non-essential cookies).

We may share your data with trusted third parties who help us run our business, including:

• Stripe, for card payments
• Starling Bank, for payments made by bank transfer
• 123 Reg, for domain registration and hosting
• Titan, for business email
• Resend, for sending emails triggered by our website's contact form
• HubSpot, for managing enquiries and client relationships (CRM)
• Our accountant, where relevant for invoicing and tax purposes

We do not share your data with third parties for their own marketing purposes.

Stripe processes card payment data under its own privacy policy, which you can read at stripe.com/privacy.
123 Reg's privacy policy is available at 123-reg.co.uk/terms/privacy.
Titan's privacy policy is available at support.titan.email.
Starling Bank's privacy notice is available at starlingbank.com/legal/privacy-notice.
Resend's privacy policy is available at resend.com/legal/privacy-policy.
HubSpot's privacy policy is available at legal.hubspot.com/privacy-policy.

Some of the third-party providers we use (see Section 5) may store or process data outside the UK, including in the United States. Where this happens, we rely on those providers' own compliance with UK GDPR safeguards, such as Standard Contractual Clauses or equivalent measures, to ensure your data is protected to a UK standard wherever it is processed.

We retain personal data only for as long as necessary to provide our services and meet our legal obligations (e.g. UK tax record-keeping requirements, typically 6 years for financial records). If you make an enquiry but don't go on to become a client, we delete your enquiry data after 12 months of inactivity.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (“right to be forgotten”)
• Object to or restrict certain processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at hello@truepointconsulting.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you have concerns about how we handle your data.

We take reasonable steps to protect your personal data, including using secure, reputable third-party providers (such as Stripe for card payments) and limiting access to your data to what's necessary to deliver our services.

Our services are aimed at businesses and business owners, not children. We do not knowingly collect personal data from anyone under the age of 13, and if we become aware that we have done so, we will delete it immediately.

We may update this policy from time to time. The “last updated” date at the top of this page will reflect the most recent changes.

If you have any questions about this policy or how we handle your data, contact us at hello@truepointconsulting.co.uk.