Privacy Notice

Who we are

Acuto Consulting Ltd (“Acuto”, “we”, “us”) is a company registered in England and Wales (company number: 16042817), based in Shepton Mallet, Somerset. Acuto is registered with the Information Commissioner's Office (ICO registration number: ZB917110).

Acuto is a sole-director consultancy providing marketing technology, data integration, and marketing automation consulting services.

For any questions about this notice or how we handle personal data, contact:

ben@acutoconsulting.co.uk

What this notice covers

This notice explains how we handle personal data in two capacities:

1. As a data controller — for our own business contacts (e.g. prospective and current clients, suppliers, people who email us) and visitors to this website.
2. As a data processor — when we process personal data on behalf of clients as part of a consulting engagement, acting only on their documented instructions and under a data processing agreement.

This website

This is a static informational website. It does not use cookies, analytics, tracking scripts, or any forms that collect personal data. The only personal data we receive via the site is what you choose to send us directly by email.

Personal data we process (as controller)

When you contact us, or we engage with you as a client, prospect, or supplier, we may process:

• Name and job title
• Business email address and phone number
• Company name
• Correspondence and information you provide to us
• Invoicing and payment details, where relevant to a contract

We do not process any special category data about you, and we do not sell or share personal data with third parties for marketing purposes.

Why we process it and our lawful basis

Personal data we process (as processor)

Where we're engaged to deliver technical consulting work, we may access personal data held within a client's own systems and platforms (e.g. CRM or marketing automation platforms) strictly as instructed by that client. In this capacity, the client is the data controller and determines the purpose and means of processing; we process only on their documented instructions and under a data processing agreement.

We do not download or store client personal data locally. It is accessed and worked on directly within the client's own systems and is not exported, copied, or retained by us outside that environment.

Where data is processed

All processing is carried out by us from the UK. We do not transfer personal data outside the UK or EEA. Where a client's own platforms operate internationally, that is governed by the client's arrangements with those providers, not by us.

Retention

• Business contact data (as controller): retained for as long as needed to maintain the business relationship, and for a reasonable period afterwards for legal, accounting, or record-keeping purposes, then securely deleted.
• Client data processed on instruction (as processor): not retained beyond the engagement; returned or securely deleted on completion in line with the client's instructions and our data processing agreement.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Request erasure of your data
• Restrict or object to processing
• Data portability, where applicable
• Complain to the ICO (ico.org.uk) if you believe your data has been mishandled

To exercise any of these rights, contact us at ben@acutoconsulting.co.uk.

Changes to this notice

We may update this notice from time to time. The “last updated” date at the top shows when it was last revised.