Privacy notice

Who we are

This website is operated by RBC trading as Untether Advisory, which is the data controller for the personal information described here.

Contact for privacy questions: privacy@untetheradvisory.co.uk.

What personal information we collect

Depending on how you interact with us, we may hold:

• Your name, work email address, company and role, if you complete our enquiry form.
• Anything you choose to write in the enquiry form, including your sector and company size.
• Contact details of people involved in a client engagement, such as name, job title, email address and project role.
• Client portal account information, which is the email address you sign in with and the authentication record held by our backend provider.
• Notes, evidence and observations recorded during an engagement, which may reference individuals in the client organisation.
• Technical information created automatically when you visit the site, such as your IP address, which is processed by our hosting provider in server logs.

We do not collect special category data through this website, and we do not ask for payment card details here.

How we collect it

Directly from you, through the enquiry form, email, calls and meetings, and through your use of the client portal. Some technical information is collected automatically by the systems that host and run the site.

Why we use it and our lawful bases

• Responding to enquiries. We use your details to reply to you and to arrange a diagnostic conversation. Lawful basis: legitimate interests, namely responding to a business enquiry you sent us.
• Delivering client work. We use contact and project information to run an engagement. Lawful basis: contract, or legitimate interests where the contract is with your employer rather than with you personally.
• Running the client portal. We use account information to authenticate you and show you your organisation's project. Lawful basis: legitimate interests in providing a secure client workspace.
• Security and site operation. Server logs help keep the site available and secure. Lawful basis: legitimate interests.
• Legal and accounting obligations. Lawful basis: legal obligation.

Enquiries and diagnostic conversation requests

If you submit the enquiry form, your details are sent directly to HubSpot, the customer relationship platform we use to manage enquiries, and are held in our HubSpot account. We use them to respond to your enquiry, continue that conversation and act on any communication choices shown in the form.

Client relationships and the client portal

The client portal is restricted to named individuals at client organisations. It may contain confidential business information about the client as well as personal information about people involved in the engagement. Access is granted and removed by us on request from the client.

Website usage and analytics

We do not use Google Analytics, advertising pixels or social media tracking on this website. HubSpot provides the enquiry form on the Diagnostic Conversation page and may use browser storage to operate and protect that form and record choices presented within it. See our cookies page for details.

Marketing

We do not currently operate a marketing mailing list from this website. If that changes, subscribing will be a separate, clearly labelled choice and never a condition of sending an enquiry.

Who we share information with

We do not sell personal information. We share it with the service providers that run this website and our business systems, and with professional advisers or authorities where we are required to.

Providers currently used to run this site and portal:

• Our website hosting and application platform, which serves the site and keeps server logs.
• Our backend platform, which provides the database and authentication behind the client portal.
• HubSpot, the customer relationship platform that receives and stores enquiry form submissions on our behalf.
• Email, calendar and document providers used to respond to enquiries and deliver client work.

International transfers

Some providers may process data outside the UK. Where that happens, we use safeguards recognised under UK data protection law, such as adequacy regulations or approved contractual protections.

How long we keep information

We keep enquiry information only for as long as needed to manage the enquiry and any resulting relationship. We keep client engagement records only for as long as needed to deliver and evidence the work and meet legal and accounting requirements. We review retained information periodically and delete or anonymise it when it is no longer needed.

Information security

The site is served over HTTPS. Portal access requires an account and sign in, and database access is restricted by row level security rules. Access to client material is limited to people who need it to do the work.

Your rights

You have the right to access your personal information, to have it corrected or erased, to restrict or object to how we use it, to data portability where it applies, and to withdraw consent where we rely on consent.

To exercise any of these rights, contact us at privacy@untetheradvisory.co.uk or through the enquiry form. We respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.

Changes to this notice

We update this notice when our practices change. The date at the top shows when it was last revised.