Privacy Policy
Last Updated:
ConsultAway helps UK businesses recover money they are already owed — through government funding, tax and duty reclaims, and lower supplier costs. Doing that means handling information about your business, and sometimes about the people in it.
This policy explains what we collect, why we collect it, who sees it and what you can ask us to do about it. It covers this website and the services we provide.
Who we are
[COMPANY LEGAL NAME], trading as ConsultAway, is the data controller for the information described in this policy. That means we decide what is collected and what happens to it.
Registered in England and Wales, company number [COMPANY NUMBER]
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Email: [CONTACT EMAIL]
If you have a question about anything here, that email address is the fastest way to reach a person who can answer it.
What we collect
When you get in touch
If you complete a form, book an assessment or email us, we collect what you choose to give us. Typically that is your name, email address, phone number, company name, and whatever you tell us about your situation.
When we look at a claim for you
Establishing whether you are owed money means looking at real records. Depending on which of the three areas applies, that can include:
Statutory accounts, tax computations and corporation tax returns
Payroll records and details of staff time spent on qualifying work
Invoices, supplier contracts and purchase records
Energy, telecoms, insurance and waste bills
Import and customs paperwork, including commodity codes and duty paid
Property, rates and lease documentation
Some of this contains personal information about your employees, directors or shareholders. We treat it as confidential, we only ask for what a claim genuinely requires, and we do not use it for anything other than the work you have asked us to do.
When you visit this website
Our hosting provider records basic technical information automatically, including your IP address, browser and device type, the pages you visited and the site that referred you. We use this to keep the site working and secure.
Why we use it, and the lawful basis for doing so
UK data protection law requires us to have a specific reason for every use of personal information. Ours are:
To answer your enquiry and carry out the free assessment — because you have asked us to take these steps before deciding whether to work together.
To prepare, submit and manage claims on your behalf — to perform our contract with you.
To keep records of work we have done — to meet legal obligations, including tax record-keeping and anti-money-laundering rules.
To send you updates about our services — with your consent, or where you are an existing client and the update relates to similar work. You can opt out of these at any time.
To protect the site and prevent misuse — because we have a legitimate interest in keeping our systems and your data secure.
We do not make decisions about you by automated means alone, and we do not use your information to build a profile for advertising.
Who we share it with
We do not sell personal information, and we do not pass it to anyone who is not directly involved in the work.
HMRC and other government bodies, where a claim or application is submitted. Nothing is submitted in your name until you have seen it and told us to proceed.
Your accountant or adviser, where they introduced you to us or where you have asked us to keep them copied in.
Suppliers and providers, where a cost-reduction review requires us to approach them on your behalf, and only with your authority.
Service providers who help us operate, such as our website host, email and document storage providers. They act on our instructions and cannot use your information for their own purposes.
Professional advisers and regulators, where we are required to disclose information by law.
Where we act as your agent with HMRC, we will ask you to authorise that appointment first. You can withdraw it at any time.
Sending information outside the UK
Some of the providers we rely on store data outside the United Kingdom. Where that happens, we only use providers covered by UK adequacy regulations or bound by the UK International Data Transfer Addendum, so that your information keeps the same protection it has here.
How long we keep it
Enquiries that do not become engagements — up to 12 months, then deleted.
Client and claim records — six years from the end of our engagement. This matches the period in which HMRC can open an enquiry and the period we may need to defend a claim.
Marketing contacts — until you unsubscribe, and removed from our lists promptly afterwards.
When a retention period ends, we delete the information or anonymise it so it can no longer identify anyone.
Your rights
You can ask us to:
Give you a copy of the personal information we hold about you
Correct anything that is wrong or incomplete
Delete information we no longer have a reason to keep
Restrict how we use it while a concern is being resolved
Send it to you, or to another provider, in a portable format
Stop using it where we rely on legitimate interests
Withdraw consent you have given, at any time
Write to us at [CONTACT EMAIL] and we will respond within one month. There is no charge.
If you are not satisfied with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.
Cookies
This website is built and hosted on Framer, which sets a small number of cookies that are necessary for pages to load and function correctly. These cannot be switched off.
We do not currently use advertising or profiling cookies. If we add analytics or marketing cookies later, we will ask for your consent through a banner before they are set, and you will be able to change your choice at any time.
You can block or delete cookies through your browser settings, though parts of the site may not work properly if you do.
Keeping information safe
We use access controls, encryption in transit and reputable providers to protect the information we hold, and we limit access to the people who need it to do the work. No system can be guaranteed completely secure, but if a breach ever affected your rights we would tell you and the Information Commissioner’s Office as the law requires.
Changes to this policy
We may update this policy as our services develop or the law changes. The current version always appears on this page, with the date it took effect shown above.
Contact
Questions about this policy, or about information we hold, should go to [CONTACT EMAIL].
