Privacy Policy
Last updated:
Who We Are
This privacy policy applies to Engaging Data Ltd, a data consultancy based in the United Kingdom. We are a data controller as defined under the UK General Data Protection Regulation (UK GDPR).
Data Controller Contact Details. Engaging Data Ltd, security@engagingdata.co.uk. ICO Registration: ZA921443. We recommend verifying our registration at ico.org.uk.
What Data We Collect
We collect data from visitors to our website in the following ways:
Google Analytics (GA4)
We use Google Analytics to understand how visitors interact with our website. This includes pages visited, time spent, browser type, and general location data (at country or region level). Google Analytics uses first-party and third-party cookies to collect this data. The data collected is anonymous and does not identify you personally. We have configured Google Analytics to anonymise IP addresses before processing.
Microsoft Bookings Data
When you book a meeting through our Microsoft Bookings page, we collect your name, email address, and the details of your booking (date, time, and any notes you provide). This data is processed by Microsoft as part of our Microsoft 365 subscription and is used to manage scheduling and facilitate communication about your meeting.
Contact Form Submissions
Our contact form collects your first name, last name, work email, company name, service interest, and any message you choose to include. This data is used to respond to your enquiry and to understand what services might be relevant to your needs.
Legal Basis for Processing
Under UK GDPR, we process your data on the following legal bases:
Legitimate Interests
We process analytics data (Google Analytics) on the basis of legitimate interests. We have a legitimate interest in understanding how visitors use our website to improve our services and user experience. This processing does not override your privacy rights because the data is anonymised and cannot identify you.
Consent
When you submit our contact form, you are consenting to us processing your personal data in order to respond to your enquiry. You may withdraw this consent at any time by contacting us at security@engagingdata.co.uk.
Contract Performance
When you book a meeting through Microsoft Bookings, we process your booking data to perform the contract for scheduling and facilitating that meeting.
How We Use Your Data
We use the data we collect for the following purposes:
- Analytics: To understand how our website is used, which pages are popular, and how we can improve the user experience.
- Communication: To respond to your enquiries and provide information about our services.
- Meeting Management: To schedule and facilitate meetings you book through our Microsoft Bookings page.
- Service Improvement: To evaluate which services are of most interest to visitors and to tailor our marketing accordingly.
We do not use your personal data for automated decision-making or profiling in any way that produces legal or similarly significant effects.
Cookies
Our website uses cookies to collect analytics data through Google Analytics. Cookies are small text files stored on your device that help us understand how you interact with our site.
Google Analytics Cookies
Google Analytics sets cookies to track your interactions with our website. These cookies are used to collect data about your browsing behaviour, which is then aggregated and anonymised. You can opt out of Google Analytics tracking by:
- Using the Google Analytics opt-out browser extension
- Disabling cookies in your browser settings
- Using your browser's "do not track" feature (if supported)
For more information about how Google uses data from our site, see Google's privacy policy.
Managing Your Cookie Preferences
You can manage your cookie preferences at any time by clicking the "Cookie Settings" button located in the bottom left corner of any page on our website. This will allow you to view detailed information about each category of cookies and adjust your consent settings. For more information about how we collect, use and protect cookies, please see our Terms and Conditions.
Third-Party Services
We use the following third-party services to process your data:
Google Analytics (Google LLC)
Google Analytics is used to track website usage. Your data is transferred to Google's servers in the United States. Google processes this data under its own privacy policy. See Google's privacy policy for details.
Microsoft Corporation
When you book a meeting through Microsoft Bookings, your booking data is processed by Microsoft as part of our Microsoft 365 subscription, in accordance with the Microsoft Online Services Terms and Microsoft's privacy statement. See Microsoft's privacy statement for details.
We have Data Processing Agreements in place with these third parties to ensure your data is processed securely and in compliance with UK GDPR.
Data Retention
We retain your data for as long as necessary to fulfil the purposes outlined in this policy:
- Analytics Data (Google Analytics): Retained by Google Analytics in accordance with their retention policy (typically 14 or 26 months depending on configuration).
- Contact Form Data: Retained for 2 years from the date of submission, unless we have an ongoing business relationship with you, in which case we retain it for the duration of that relationship plus 1 year.
- Microsoft Bookings Data: Retained by Microsoft in accordance with our Microsoft 365 tenant's retention policy. You can request deletion of your booking data by contacting us at sales@engagingdata.co.uk.
If you request deletion of your data, we will comply with that request within 30 days unless we have a legal obligation to retain it longer.
Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will provide this information within 30 days of your request.
Right of Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right of Erasure
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or if you withdraw consent. This right does not apply where we have a legal obligation to retain the data.
Right to Restrict Processing
You have the right to request that we restrict how we use your personal data whilst we verify its accuracy or determine if we have a legal basis to continue processing it.
Right to Data Portability
You have the right to request your personal data in a portable, machine-readable format so you can transfer it to another organisation.
Right to Object
You have the right to object to processing of your data on the basis of legitimate interests. If you object, we will stop processing your data unless we can demonstrate a compelling legal reason to continue.
How to Exercise Your Rights
To exercise any of the rights outlined above, please email us at security@engagingdata.co.uk with a clear description of what you're requesting. We will need to verify your identity before responding. For Subject Access Requests, we may ask for proof of identity such as a copy of your passport or driving licence.
We aim to respond to all data rights requests within 30 days of receipt. If we cannot comply with your request, we will explain why.
Right to Complain to the ICO
If you believe we have not processed your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO at:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Phone: 0303 123 1113 (local rate) or 01625 545 745. Web: www.ico.org.uk
You may lodge a complaint at any time, but we appreciate the opportunity to address your concerns first. Please contact us before escalating to the ICO.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or to comply with legal requirements. Any significant changes will be announced on our website. Your continued use of our website following such changes constitutes your acceptance of the updated privacy policy.
This privacy policy was last updated on 16 February 2026.
Contact Us
If you have any questions about this privacy policy or how we process your personal data, please contact us at security@engagingdata.co.uk. We're happy to clarify anything or discuss your privacy concerns.