Legal

Privacy Policy

Rose Tinsley Consulting Ltd ("we", "us", "our") is committed to protecting your personal data and complying with the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

This privacy policy explains how we collect, use, and protect your personal information when you use our website or contact us about our services.

Who We Are

Rose Tinsley Consulting Ltd is registered in England and Wales (Company No. 15880463), based in Essex. For data protection queries, contact us at hello@rosetinsleyconsulting.com.

Information We Collect

Contact form. When you complete our contact form, we collect the information you provide so we can respond to your enquiry, including:

  • Name
  • Email address
  • Phone number (if provided)
  • Company name (if provided)
  • Subject, sector and the challenge you're contacting us about
  • Your message

Fields marked as required must be completed for us to respond. Providing additional information is optional and entirely at your discretion.

Resource downloads. If you request a downloadable resource, such as our GIS Health Check Scorecard, we collect your first name, email address and company name so we can provide the resource and email you a copy.

Knowledge Hub email sign-up. If you sign up to receive practical GIS tips from our Knowledge Hub, we collect your email address for this purpose.

Analytics and cookies. This website uses Google Analytics (via Google Tag Manager) to understand how visitors use our site. This may involve setting cookies and collecting information about your browser, network and device, the pages you visit, and your IP address. This information is processed by Google in line with Google's privacy policy. The site also uses your browser's local storage to remember whether you've dismissed certain on-site prompts; this does not identify you personally. You can manage cookies and local storage at any time through your browser settings.

Fonts. This website serves font files from and renders fonts using Google Fonts. To properly display this site to you, Google may receive information about your browser, network or device, and your IP address.

Who We Share Your Data With

We use trusted third-party service providers to help operate our website and manage communications. These parties only access your data to perform specific tasks on our behalf and are obligated to protect it:

  • Netlify – hosts this website and processes form submissions on our behalf
  • Google – provides analytics (Google Analytics) and font delivery (Google Fonts)
  • Microsoft 365 – used to receive, store and respond to enquiries submitted via our forms

Some of these providers may process data outside the UK. Where this happens, we rely on appropriate safeguards, such as the provider's standard contractual clauses or equivalent data transfer mechanisms.

How We Use Your Data

We use the information you provide to:

  • Respond to your enquiries
  • Provide information about our services
  • Send requested resources, such as guides or scorecards
  • Send Knowledge Hub emails to those who have signed up
  • Improve our website and services
  • Maintain internal records for administrative purposes

We do not sell, rent, or share your personal information with third parties for marketing purposes, and we do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Legal Basis for Processing

We process your personal data under the following lawful bases, as permitted by Article 6 of the UK GDPR:

  • Consent – for example, when you sign up to receive Knowledge Hub emails or download a resource
  • Legitimate interests – for example, to respond to enquiries and improve our website

You have the right to withdraw your consent at any time by contacting us using the details above.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. You can request deletion of your data at any time (see "Your Rights").

Data Storage and Security

Our website is hosted on Netlify, which provides secure infrastructure for static websites. Form submissions are processed by Netlify and delivered to us via email. We take appropriate steps to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure of your data (the "right to be forgotten")
  • Restrict processing of your data
  • Object to processing of your data
  • Data portability
  • Withdraw consent at any time

We aim to respond to all valid requests within one month. To exercise any of these rights, contact us at hello@rosetinsleyconsulting.com.

Complaints and Regulatory Contact

If you have concerns about how we've handled your personal data, you can complain to us directly at hello@rosetinsleyconsulting.com. Please mark your message as a "Data Protection Complaint" where possible, though we'll treat any relevant complaint as such regardless of how it's labelled.

We'll acknowledge your complaint within 30 days, investigate without undue delay, and keep you updated on our progress if it's likely to take some time. We'll then write to you with the outcome and details of any action we've taken.

If you're not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Data Breaches

In the unlikely event of a personal data breach, we will notify the ICO within 72 hours where required and inform affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms.

Children's Privacy

This website is not intended for use by children under the age of 16, and we do not knowingly collect personal data from anyone under this age. If you believe we have collected data from a minor, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. The most current version will always be available on this page with an updated effective date.

Last updated: June 2026. For queries, please contact us.