Privacy notice
Last updated: October 2026
This notice explains how Simma Consulting Ltd (“Simma”, “we”, “us”) collects and uses personal information when you visit this website, contact us, or work with us. We are committed to handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Simma Consulting Ltd is the data controller for the personal information described in this notice. We are a company registered in England and Wales (company number 13686509). Our registered office is 28-29 New Road, Kidderminster DY10 1AF.
You can contact us about anything in this notice at enquiries@simmaconsulting.co.uk, or by post at our registered office.
What information we collect
When you contact us
If you email us, we collect the details you choose to give us, such as your name, email address, company, phone number and the content of your message.
When you visit the website
Like most websites, our hosting provider (Microsoft Azure) automatically processes technical information needed to deliver and secure the site, such as your IP address, browser type and the pages requested. This is used for security and to keep the site running, not to identify or profile you.
When we work with you
If you are a client, or work for one, we hold business contact details and records of our correspondence and services, and we may access your organisation’s systems and data when providing support. That processing is governed by our agreement with your organisation.
How and why we use your information
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and discussing our services | Legitimate interests (responding to people who contact us), or steps before entering into a contract at your request |
| Providing services to our clients and managing the relationship | Contract, and legitimate interests |
| Keeping the website secure and working | Legitimate interests |
| Keeping business and accounting records | Legal obligation |
We will only send you business updates by email where the law allows it, and you can opt out at any time. We do not sell your information, and we do not use it for automated decision-making or profiling.
Cookies
This website does not use analytics, advertising or tracking cookies, and it does not set any cookies that need your consent. If that ever changes, we will update this notice and ask for your consent first.
Who we share your information with
We use a small number of trusted service providers who process information on our behalf, under contract and only on our instructions:
- Microsoft: website hosting (Azure) and email and business systems (Microsoft 365).
- Our accountants and professional advisers, where necessary.
We may also disclose information where required by law, or to protect our rights.
International transfers
We aim to keep data in the UK. Microsoft may process some data outside the UK. Where it does, the transfer is protected by appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum.
How long we keep information
- Enquiries that do not lead to work: up to 24 months, then deleted.
- Client records: for the length of the relationship and up to 6 years afterwards, to meet legal and accounting requirements.
- Website server logs: kept by our hosting provider for a short period for security purposes.
How we protect your information
We use appropriate technical and organisational measures to protect personal information, including encryption in transit, multi-factor authentication and access controls on the systems we use.
Your rights
Under data protection law you have the right to:
- access the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to our use of your information where we rely on legitimate interests, including for direct marketing;
- ask for your information to be transferred to another organisation (data portability).
To exercise any of these rights, email enquiries@simmaconsulting.co.uk. There is normally no charge, and we will reply within one month.
Complaints
If you have concerns about how we handle your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.