Privacy Policy

1. Who we are

This website (dvelopconsultants.co.uk) is operated by DVelop Apprenticeship Consultants ("we", "us", "our"), which is the data controller for personal data collected through this site.

For any privacy-related questions or to exercise your rights, contact us at liammatthews@dvelopconsultants.co.uk.

2. What data we collect

We only collect data you give us directly:

• Contact forms ("Have a question?" and the booking form): your name, email address, phone number, and the message you send us.
• Bookings & payments: your name and email are passed to our payment provider to process your order. We do not see or store your full card details — those are handled directly by the payment provider.
• Technical data: standard server and CDN logs (IP address, browser type, pages visited) for security and to keep the site running. We do not use analytics or advertising cookies.

3. Why we use it (lawful basis)

• To answer your enquiry — lawful basis: legitimate interests (responding to people who contact us).
• To deliver coaching sessions you've booked — lawful basis: performance of a contract.
• To meet our legal obligations (e.g. keeping accounting records) — lawful basis: legal obligation.
• To keep the site secure — lawful basis: legitimate interests.

4. Who we share data with

We share the minimum amount of data needed with these processors:

• Stripe / Paddle — to process payments. Their privacy policies apply to the payment step.
• Our email provider — to send booking confirmations and reply to enquiries.
• Our hosting provider — to operate this website.

We never sell your personal data, and we do not share it for marketing purposes.

5. How long we keep it

We keep enquiry messages for up to 24 months after our last contact with you. Booking and payment records are kept for 6 years to meet UK tax and accounting obligations (HMRC requirement). After these periods, data is deleted or anonymised.

6. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data (where we have no overriding legal obligation to keep it);
• ask us to restrict or object to certain processing;
• receive your data in a portable format;
• complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email us at the address in section 1.

7. Cookies

We do not use tracking, analytics, or advertising cookies. The only cookies that may be set are strictly necessary cookies used by our payment provider during checkout to process your transaction securely. Under UK PECR, strictly necessary cookies do not require consent.

8. International transfers

Some of our providers (e.g. payment processors) may process data outside the UK. Where they do, transfers are protected by UK GDPR-approved safeguards such as the International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent change.