Privacy Policy

DRD Consulting Ltd is committed to protecting your privacy and handling personal information in a transparent, lawful, and responsible way.

This Privacy Policy explains how we collect, use, store, and share personal data when you engage with our website or enquire about services accessed through DRD Consulting Ltd.

DRD Consulting Ltd is a UK-registered limited company.

We act as a data controller for personal information collected through our website and initial enquiries. Independent practitioners delivering services may act as separate data controllers for information collected during service delivery.

Contact details for data protection enquiries are provided at the end of this policy.

We may collect and process the following types of personal data:

• contact details (such as name, email address, telephone number)
   
• information provided in enquiry forms or emails
   
• basic contextual information relevant to your enquiry
   
• technical information (such as IP address, browser type, and usage data)
   

We do not intentionally collect unnecessary personal data.

Some enquiries may include information relating to health or neurodivergence. This is classed as special category data under data protection law.

Such information is:

• provided voluntarily by you
   
• processed only where necessary
   
• handled with additional care and confidentiality
   

We use personal information to:

• respond to enquiries
   
• provide information about services
   
• facilitate contact with appropriate independent practitioners
   
• manage administrative and governance processes
   
• comply with legal or regulatory obligations
   

We do not use your data for automated decision-making or profiling.

We process personal data under one or more of the following lawful bases:

• your consent
   
• performance of a contract or steps taken prior to entering a contract
   
• legitimate interests (such as responding to enquiries and operating the business responsibly)
   
• compliance with legal obligations
   

We may share personal information:

• with independent practitioners where relevant to your enquiry
   
• where required by law or regulatory obligation
   
• with trusted service providers who support our operations (e.g. secure IT systems), under appropriate safeguards
   

We do not sell personal data or share it for marketing purposes.

Independent practitioners are responsible for their own privacy practices once they receive personal information in their role as independent data controllers.

Some service providers or practitioners may be based outside the UK. Where personal data is transferred internationally, appropriate safeguards are used to ensure data protection standards are maintained in line with UK and EU requirements.

We take reasonable steps to protect personal data from unauthorised access, loss, misuse, or disclosure.

Personal data is stored securely and retained only for as long as necessary for the purposes for which it was collected, or as required by law.

Under UK and EU data protection law, you have the right to:

• access your personal data
   
• request correction of inaccurate data
   
• request deletion of your data (where applicable)
   
• restrict or object to processing
   
• withdraw consent at any time (where processing is based on consent)
   
• lodge a complaint with the Information Commissioner’s Office (ICO)
   

Our website may use cookies or similar technologies to support basic functionality and understand site usage.

You can control cookies through your browser settings.

This Privacy Policy may be updated from time to time to reflect changes in law or how we operate. The most recent version will always be published on our website.

If you have any questions about this Privacy Policy or how your data is handled, please contact:

DRD Consulting Ltd

Email: info@drdownes.com