Privacy Policy

How Grey Elephant collect and use your data

Grey Elephant Consulting Ltd is a B2B service provider and we are the data controller in our business relationship.

We’re working hard to earn your trust. A big part of that is maintaining your privacy.  You deserve transparency, education, choice, protection, and simplicity. Our goal is to help you take action to protect your privacy

This Privacy Notice explains what personal information we collect from you, how we use it and what your rights are. This privacy notice does not apply to our processing of employee personal data, which is subject to a separate privacy notice available through internal company systems.

The reason we process your personal data could be any of or a combination of the following:

  • To take steps at your request prior to entering into a contract such as conducting credit checks and fulfilling our onboarding requirements
  • To perform our business contract with you or where applicable, our business customer, supplier, partner, agent or investor whom you act on behalf of or represent
  • where necessary for the purposes of the legitimate interests pursued by us or our affiliates within Grey Elephant Consulting, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual(s)
  • where necessary for us to comply with our legal obligations or to enforce or defend our legal right

What personal information we collect on our website

We collect information such as name, job title, company name, postal address, e-mail address and telephone number. This information may be shared with us through forms, e-mail or via telephone. Where personal information is collected through our website or our online services in this way, this will be clearly indicated against your record in our CRM system.  We use WordPress for the website form and Microsoft for all other methods.  A copy of the WordPress privacy policy can be found here and the Microsoft privacy policy can be found here.

If you contact us via email we will capture whatever information we need to reply to you, and we rely on ‘legitimate interest’ to do this.  We don’t retain your information for any longer than is needed to resolve your query unless we need to hold on to it for legal or contractual reasons, which would be if we go on to work together.  We use Microsoft to do this.  A copy of their privacy policy can be found here.

If you contact us for a quotation or purchase services from us we will add you to our CRM system and rely on either ‘legitimate interest’ or ‘contract’ in order to provide you with these services, depending on which one we are supplying.  We use Microsoft to provide these services.  A copy of their privacy policy can be found here.

If we do enter into a service contract with you we will provide you with a privacy notice that is specific to the work we will be doing for you, before the contract commences, as our services are tailored to the individual company and we don’t want to overwhelm you with a whole lot of information that isn’t relevant to our individual contract.

At the end of our service contract we will retain data in line with our data retention policy.

Cookies

We don’t have a cookie banner…  This is because we only use functional cookies – they’re the only ones we need as they make our website work.

Your rights

The UK GDPR gives your rights over your personal data.  Your personal data is yours and you have rights in relation to it granted by the UK GDPR/Data Protection Act 2018, which include:

  • The Right to be Informed
  • The Right of Access
  • The Right to Object
  • The Right to Rectification
  • The Right to Erasure
  • The Right to Restrict Processing
  • The Right to Data Portability

For all data protection queries and issues please contact dpo@greyelephant.com

Contacting us

Please reach out at any time to hello@greyelephant.com

Complaints

If you’re not happy, you can complain to the ICO. Their details are at www.ico.org.uk. However, we can probably sort it out between us so please reach out to us first.

This privacy notice was last updated 23/07/2023.