PRIVACY POLICY

Beaupierre Consulting

1. Introduction

I am an independent consultant providing fractional AI consulting services to small and medium enterprises. I comply with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

This policy explains what personal data I collect, how I use it, and your rights.

2. Who Am I?

Name: Char
Trading As: Beaupierre Consulting
Website: beaupierreconsulting.com
Data Controller Contact: team@beaupierreconsulting.com

I am a sole trader and the Data Controller for personal data collected through my website and services.

3. What Data Do I Collect?

Via Website:

  • Name, email address, company name, message content (contact form submissions)
  • IP address, browser type, pages visited (analytics via Google Analytics)
  • Device type, location data (if permitted)

Via Service Delivery:

  • Company information, industry, business challenges
  • Documents, reports, or data you share during consultations
  • Communication records (email, calls, video meetings)

Not Collected:

  • Lead intelligence data or automated prospecting information
  • Payment card details (handled by third-party processors only)

4. Legal Basis for Processing

I process your data under these legal bases:

Data

Legal Basis

Contact form submissions

Legitimate interest (responding to enquiries) / Consent

Analytics

Consent (via cookie banner)

Service delivery

Contract (when you engage my services)

Marketing communications

Consent (if you opt in to updates)

5. How I Use Your Data

  • Respond to enquiries and schedule consultations
  • Deliver services (assessment, recommendations, implementation support)
  • Improve website (via analytics)
  • Send relevant updates (only if you've consented)
  • Comply with legal obligations (tax, accounting records)

I do not sell, share, or trade your data with third parties without your consent, except:

  • Service providers (e.g., email platform, meeting software) under data processing agreements
  • Legal compliance (e.g., HMRC, if required by law)

6. AI Use in Service Delivery

As part of my service, I may use AI tools (e.g., Claude, GPT models) to:

  • Analyse business challenges and workflows
  • Generate assessment insights and recommendations
  • Draft strategic recommendations

Important:

  • I only share de-identified or anonymised data with AI tools where possible
  • I do not share sensitive personal data (personal identifiers, financial records) without explicit consent
  • Any data shared with AI tools is subject to my data processing agreements with those providers
  • You retain ownership of all strategic recommendations and outputs

7. Data Retention

  • Contact form data: Retained for 2 years (unless you unsubscribe)
  • Client service data: Retained for 6 years (accounting/tax compliance requirement)
  • Analytics data: Retained for 14 months (Google Analytics default)
  • Marketing consent records: Retained until withdrawal

8. Your Rights Under UK GDPR

You have the right to:

  • Access – Request a copy of your data
  • Rectification – Correct inaccurate data
  • Erasure – Request deletion (subject to legal obligations)
  • Restrict Processing – Limit how I use your data
  • Portability – Receive your data in a portable format
  • Object – Withdraw consent or object to processing
  • Not be Subject to Automated Decision-Making – You won't be assessed solely by automated processes

To exercise these rights, contact: team@beaupierreconsulting.com

Response timeframe: 30 days.

9. Data Security

I take appropriate technical and organisational measures to protect your data:

  • Encrypted email and file transfers
  • Secure cloud storage (access-restricted)
  • Regular backups
  • Confidentiality agreements with service providers

However, no system is 100% secure. I cannot guarantee absolute security of data transmitted over the internet.

10. International Data Transfers

If I use service providers based outside the UK, I ensure appropriate safeguards (Standard Contractual Clauses, Adequacy Decisions) are in place.

11. Children's Data

My services are not directed at children under 18. I do not knowingly collect data from minors.

12. Third-Party Links

My website may link to third-party sites. I am not responsible for their privacy practices. Please review their policies independently.

13. Changes to This Policy

I may update this policy. Changes will be posted on this page with an updated date. Continued use of my website signifies acceptance.

14. Contact & Complaints

For queries or to exercise your rights:
team@beaupierreconsulting.com