Helping leaders bring clarity to complex situations.

Privacy Policy:

Connecting Insight Limited

Last updated: 16 October 2026

1. Introduction

1.1 Connecting Insight Limited (“Connecting Insight”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information.

1.2 This Privacy Policy explains how we collect, use, store, share and protect personal information in connection with our website, enquiries, bookings, consultancy services, professional relationships and business operations.

1.3 It applies to prospective clients, clients, representatives of organisations, professional contacts, website visitors and other individuals whose personal information we process.

1.4 We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

2. Who we are

2.1 Connecting Insight Limited is a company incorporated in England and Wales.

Company number: 07331933

Registered office: 85 Woodfield Drive, East Barnet, Barnet EN4 8PD

Website: www.connecting-insight.com

Email: connect@connecting-insight.com

2.2 Connecting Insight is generally the data controller of personal information processed for its own website, enquiries, bookings, client administration, marketing and business operations. We are registered with the Information Commissioner’s Office (ICO: Registration No. Z242599X).

2.3 In some engagements, particularly where we process personal information on behalf of an organisational client, our role may differ. Where required, appropriate data processing arrangements will be agreed separately.

3. Personal information we may collect

3.1 Depending on the nature of our relationship and the services involved, we may collect and process:

• Identity and contact information: names, job titles, organisations, business and personal contact details.

• Enquiry and booking information: appointment details, service selections, business enquiries and correspondence.

• Client and engagement information: business circumstances, organisational structures, stakeholder relationships, strategic considerations, communications, meeting notes, documents and other information relevant to an engagement.

• Financial and transaction information: billing details, invoices, payment status, transaction references and relevant accounting records.

• Professional and business relationship information: professional background, business interests, correspondence, meeting history and relevant publicly available professional information.

• Marketing information: contact preferences, subscription details, communications history and records of consent or objections.

• Technical information: website usage, device and browser information, IP addresses and information collected through cookies and similar technologies.

• Meeting and communication records: correspondence, handwritten notes, electronic records and, where specifically arranged, audio or video recordings or transcripts.

3.2 We may receive information directly from you, from organisations you represent, from other participants in an engagement, from service providers or through publicly available professional sources.

3.3 We seek to collect information that is relevant and proportionate to the purposes for which it is used.

4. Confidential and sensitive information

4.1 Our services may involve discussions about confidential business matters, commercial relationships, organisational dynamics, strategic decisions and other potentially sensitive situations.

4.2 We ask individuals not to provide unnecessary personal information, special-category personal data or confidential documents in initial enquiries or booking descriptions.

4.3 Special-category personal data includes certain information relating to health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, genetic or biometric identification, sex life and sexual orientation.

4.4 We do not ordinarily require such information to deliver our services. However, it may occasionally arise incidentally during discussions or be contained in documents provided by clients.

4.5 Where this occurs, we will consider whether the information is necessary, whether an appropriate lawful basis and any additional legal condition apply, and what restrictions or protective measures are appropriate.

4.6 We may ask clients to avoid further disclosure, limit discussion, redact information, restrict access or securely delete unnecessary information.

4.7 Information concerning criminal convictions or offences will also be handled in accordance with applicable legal requirements.

5. Purposes and lawful bases

5.1 We process personal information for the following purposes, relying on the lawful basis appropriate to the circumstances:

5.1.1 Enquiries and prospective engagements

5.1.1.1 To respond to enquiries, discuss potential services, provide information and arrange appointments.

5.1.1.2 Lawful basis: steps taken at an individual's request before entering into a contract, or legitimate interests in responding to business enquiries and developing professional relationships.

5.1.2 Provision of services

5.1.2.1 To arrange and deliver Rapid Insight Calls, strategic thinking sessions, communication support, consultancy projects and other agreed services.

5.1.2.2 Lawful basis: performance of a contract with an individual, or legitimate interests in delivering services to an organisation and communicating with its representatives, as applicable.

5.1.3 Business administration

5.1.3.1 To manage bookings, payments, invoices, accounts, correspondence, suppliers and business records.

5.1.3.2 Lawful basis: contract, legal obligation or legitimate interests, depending on the activity.

5.1.4 Client records and professional accountability

5.1.4.1 To maintain proportionate records of engagements, document significant discussions and agreed scope, manage service quality, resolve disputes, protect legal rights and respond to complaints or claims.

5.1.4.2 Lawful basis: legitimate interests, or legal obligation where applicable.

5.1.5 Business development and marketing

5.1.5.1 To maintain professional contacts, communicate about relevant services and opportunities, and undertake lawful direct marketing.

5.1.5.2 Lawful basis: consent or legitimate interests, depending on the activity and applicable marketing rules.

5.1.6 Website operation and security

5.1.6.1 To operate, protect and maintain our website, systems and communications, prevent misuse and understand website performance.

5.1.6.2 Lawful basis: legitimate interests, legal obligation or consent, as applicable.

5.1.7 Legal and regulatory compliance

5.1.7.1 To meet applicable legal, accounting, regulatory and other statutory obligations.

5.1.7.2 Lawful basis: legal obligation or another applicable lawful basis.

5.2 Where we rely on legitimate interests, we consider the purpose and necessity of the processing and balance those interests against the rights and freedoms of individuals.

5.3 Where consent is our lawful basis, it may be withdrawn at any time. Withdrawal does not affect processing already carried out lawfully.

6. Client meetings, notes and recordings

6.1 We may maintain handwritten and electronic notes of client discussions, together with booking information, correspondence and other relevant engagement records.

6.2 Notes may be created during or shortly after meetings and subsequently stored in secure electronic or physical files.

6.3 We do not routinely record all client meetings.

6.4 In certain circumstances, we may arrange to record or transcribe a meeting where there is a legitimate and appropriately assessed purpose, such as maintaining an accurate record of a complex discussion.

6.5 Where recording or transcription is proposed, we will provide appropriate information in advance about the purpose, nature and handling of the recording and make the necessary arrangements with participants before recording begins.

6.6 Recording will be subject to an appropriate lawful basis, necessity and proportionality assessment, and any additional requirements arising from the information involved.

6.7 Recordings will not be retained automatically for the same period as all other client records. Their retention will depend on the circumstances, purpose and applicable legal requirements.

7. Third-party service providers and business systems

7.1 In operating our business and providing services, we may use third-party providers and commercially available technology, including services for:

• Website hosting, website management and online forms.

• Scheduling, booking and calendar management.

• Payments, invoicing, accounting and financial administration.

• Email, messaging, telephone and video conferencing.

• Document creation, storage, sharing and electronic signatures.

• Cloud computing, IT administration, backup and cybersecurity.

• Customer relationship management, project management and business administration.

• Marketing, mailing lists and communication management.

• Professional support, including legal, accounting, insurance and regulatory services.

7.2 Examples of platforms within these categories include Wix, Calendly, Stripe, PayPal, Microsoft 365, Teams, OneDrive, Google Workspace, Google Drive, Google Meet, Zoom and Dropbox.

7.3 These examples are illustrative and do not necessarily indicate that we currently use every named platform.

7.4 We may also receive information through platforms selected by clients or third parties, including shared document systems, collaborative workspaces and secure file-transfer services.

7.5 Providers may act as processors on our behalf or as independent controllers, depending on their services and contractual arrangements.

7.6 Where required, we put appropriate data protection agreements and safeguards in place.

7.7 We do not sell personal information.

8. Other disclosures

8.1 We may share personal information where reasonably necessary with relevant service providers, professional advisers, insurers, auditors, regulators, public authorities or other parties involved in the delivery or administration of an engagement.

8.2 We may also disclose information where required by law, where necessary to establish, exercise or defend legal claims, or in connection with a lawful business restructuring or transfer.

8.3 Disclosures will be limited to what is appropriate for the relevant purpose and legal basis.

9. International transfers

9.1 Some service providers, technology platforms and business systems may operate internationally.

9.2 Personal information may therefore be accessed, stored or processed outside the United Kingdom.

9.3 Where an international transfer is subject to the UK GDPR's restricted-transfer rules, we will ensure that an appropriate transfer mechanism is in place, such as applicable UK adequacy regulations, recognised contractual safeguards or another lawful mechanism.

9.4 Where required, we will undertake relevant assessments and implement additional safeguards.

9.5 Further information about applicable safeguards and how to obtain a copy of relevant arrangements may be requested using the contact details below.

10. Artificial intelligence and automated tools

10.1 We may use technology, including artificial intelligence tools, to support research, drafting, analysis, business administration and other legitimate business activities.

10.2 Our approach is not to submit identifiable client personal information or confidential client material to general-purpose AI tools unless a separate, appropriately assessed arrangement permits this.

10.3 Where client-related information is used with such tools, we aim to use information that has been effectively anonymised and stripped of identifying and confidential details.

10.4 Simply removing a person's name does not necessarily make information anonymous. We consider whether individuals could reasonably be identified from the remaining information or its context.

10.5 Where information is genuinely anonymised, it is no longer personal data for UK GDPR purposes. Where it remains identifiable, the applicable data protection requirements continue to apply.

10.6 We do not currently use solely automated decision-making that produces legal or similarly significant effects concerning individuals.

11. Direct marketing

11.1 We may contact individuals and business representatives about Connecting Insight's services, relevant developments, events, publications and professional opportunities.

11.2 Marketing communications may be sent where permitted under applicable data protection and electronic marketing laws.

11.3 Where consent is required, we will obtain it before sending the relevant communications.

11.4 In other circumstances, including certain business-to-business communications, we may rely on legitimate interests where lawful and appropriate.

11.5 We respect marketing preferences and objections. Individuals may unsubscribe from marketing communications or object to direct marketing at any time.

11.6 We will maintain appropriate records of consent, preferences and objections.

11.7 Marketing consent is not a condition of purchasing or receiving our services.

12. Information security

12.1 We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, accidental loss and misuse.

12.2 Depending on the circumstances, these measures may include restricted access, authentication controls, secure storage, appropriate encryption, backups, physical security and secure disposal procedures.

12.3 Paper records are stored securely, and electronic records are maintained using appropriately protected systems.

12.4 No electronic transmission or storage system can be guaranteed to be completely secure.

13. Retention

13.1 We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, taking account of legal, contractual, accounting and legitimate business requirements.

13.2 Our standard retention approach is:

13.2.1 Substantive client engagement records: Generally six years following completion of the relevant engagement, unless a different period is justified or required.

13.2.2 Unsuccessful enquiries: Generally up to 12 months after the last meaningful contact, unless a longer period is justified by an ongoing relationship or other legitimate purpose.

13.2.3 Financial and accounting records: Generally six years or such other period as required by applicable tax and accounting obligations.

13.2.4 Marketing information: For as long as the information remains relevant to a lawful marketing purpose, subject to periodic review, withdrawal of consent and objections. Limited suppression information may be retained to ensure that objections are respected.

13.2.5 Meeting recordings: Retained only for a defined period appropriate to their particular purpose and circumstances.

13.2.6 Website and technical information: Retained in accordance with the relevant technical requirements, provider arrangements and applicable cookie information.

13.2.7 Information may be retained for longer where reasonably necessary in connection with an actual or reasonably anticipated dispute, legal claim, investigation or legal obligation.

13.2.8 When information is no longer required, it will be securely deleted, destroyed or anonymised, subject to appropriate backup arrangements.

14. Cookies and website technologies

14.1 Our website may use cookies and similar technologies for essential website functionality, security, performance, analytics and other permitted purposes.

14.2 Where consent is required for non-essential technologies, we will seek that consent before activating them.

14.3 Further details, including relevant cookie categories and available controls, are provided in our separate Cookie Policy.

15. Your rights

15.1 Subject to applicable law and exemptions, individuals may have the right to:

• Access their personal information.

• Request correction of inaccurate or incomplete information.

• Request erasure in certain circumstances.

• Request restriction of processing.

• Object to certain processing, including direct marketing.

• Request data portability where applicable.

• Withdraw consent where processing is based on consent.

• Exercise applicable rights relating to automated decision-making.

15.2 Requests may be made using the contact details below.

15.3 We may need to verify identity before responding to certain requests.

15.4 Individuals also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at www.ico.org.uk.

15.5 We would welcome the opportunity to address any concerns directly, so please feel free to contact us first. However, you are not required to do so before contacting the ICO.

16. Third-party websites and services

16.1 Our website or communications may contain links to third-party websites, platforms or services.

16.2 Those third parties may have their own privacy notices and data protection practices.

16.3 We are not responsible for the independent processing activities of third parties where they act as separate controllers, although we remain responsible for our own compliance obligations.

17. Changes to this policy

17.1 We may update this Privacy Policy from time to time to reflect changes in our services, operations, technology or legal requirements.

17.2 The current version will be published on our website with its latest revision date.

17.3 Where changes materially affect the way we process personal information, we will provide additional notice where required.

18. Contact

For enquiries about this Privacy Policy, personal information or data protection rights, please contact:

Connecting Insight Limited

Email: connect@connecting-insight.com

Website: www.connecting-insight.com

Registered office: 85 Woodfield Drive, East Barnet, Barnet EN4 8PD.

​

CONNECTING INSIGHT LIMITED, 2026