Privacy Policy

Who I am

This website (natportman.co.uk) is operated by Nat Portman, an independent operations and growth consultant based in the United Kingdom ("I", "me", "my"). I am the data controller responsible for your personal data.

Contact: nat@natportman.co.uk
[Optional: business address / trading name / ICO registration number, if you have one]

What data I collect

I only collect the personal data you choose to give me, which may include:

• Your name, email address and any details you provide when you complete the Quick Assessment, book an Investigation Call, or otherwise contact me.
• Information about your business that you share in the course of an enquiry or engagement.
• Basic technical and usage data collected automatically by website analytics (see my Cookie Policy).

How and why I use it (lawful basis)

I use your data to:

• Respond to your enquiry and arrange or carry out consultancy work — lawful basis: to take steps at your request before entering a contract, and/or the performance of a contract.
• Send you information you have asked for — lawful basis: your consent, or my legitimate interest in responding to enquiries.
• Understand how my website is used so I can improve it — lawful basis: your consent (via the cookie banner).

I do not sell your data, and I do not use it for automated decision-making.

Who I share it with

I use a small number of trusted service providers who process data on my behalf, which may include: my website host [Lovable], my analytics provider [Google Analytics], my email provider [e.g. GoDaddy / Microsoft / Google], and any scheduling tool I use for calls [e.g. Calendly — confirm]. Each processes data only as needed to provide their service. I do not otherwise share your data unless required by law.

How long I keep it

I keep enquiry and client data only as long as needed for the purpose it was collected and to meet legal or tax obligations, after which it is securely deleted. [Confirm your retention period, e.g. "up to 6 years for financial records; enquiry data deleted within 24 months if no engagement follows."]

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or object to my use of your personal data, and the right to data portability. To exercise any of these, email nat@natportman.co.uk.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.

International transfers & security

[If any provider stores data outside the UK/EEA — e.g. Google — state that appropriate safeguards are in place.] I take reasonable technical and organisational measures to keep your data secure.

Changes

I may update this policy from time to time; the "last updated" date above shows the latest version.