Policy Policy

Last updated: 02 January 2026

Surrey Nature Consult Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to visitors to our website and to individuals who contact us or submit personal data through our online forms, including enquiry, careers, and newsletter signup forms.

1. Who we are

Surrey Nature Consult Ltd is the data controller responsible for your personal data.

Contact details:
Email: info@surreynatureconsult.com
Privacy enquiries: privacy@surreynatureconsult.com

2. Personal data we collect

We may collect and process the following categories of personal data:

Name
Email address
Phone number (where provided)
Organisation or affiliation
Country or region
Information submitted through our website forms, including Contact Us, Talk-to-Us, and Careers forms
Professional information such as areas of interest, summaries, or links to CVs, portfolios, or professional profiles
Newsletter subscription email addresses
Any information you provide to us via email or other direct communication

We do not intentionally collect special category personal data unless it is voluntarily provided and necessary for a specific purpose.

3. How we collect personal data

We collect personal data when you:

Visit and interact with our website
Submit information through our Contact Us or Talk-to-Us forms
Submit an Expression of Interest via our Careers page
Subscribe to our newsletter
Contact us by email or other direct means

4. How we use your personal data

We use personal data for the following purposes:

Responding to enquiries and communications
Providing information about our services and activities
Managing professional relationships with clients, partners, and stakeholders
Recruitment and workforce planning
Sending occasional updates and insights via our newsletter (where you have subscribed)
Website administration, security, and performance
Complying with legal and regulatory obligations

We do not use personal data for automated decision-making or profiling.

5. Lawful basis for processing

We process personal data under one or more of the following lawful bases:

Consent – where you voluntarily submit information via a form or subscribe to our newsletter
Legitimate interests – where processing is necessary to respond to enquiries, manage professional relationships, or operate our website
Contractual necessity – where processing is required to deliver agreed services
Legal obligation – where processing is required by law

You may withdraw consent at any time (see Section 9).

6. Data sharing and third parties

We do not sell personal data.

We may share personal data with trusted third-party service providers who support our operations, including:

Website hosting and maintenance providers
Email delivery and communication service providers
IT and security service providers

All third parties are required to process personal data securely and only in accordance with our instructions.

We do not share personal data with third parties for marketing purposes.

7. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

Contact and enquiry form submissions (including Contact Us and Talk-to-Us): up to 12 months
Careers / Expression of Interest submissions: up to 12 months
Newsletter subscription data: retained until you unsubscribe or request deletion
Client and project-related data: retained for the duration of the engagement and as required for legal or contractual purposes

At the end of the applicable retention period, personal data is securely deleted or anonymised.

8. Recruitment, careers, and expressions of interest

If you submit personal data through our Careers or Expression of Interest forms, we process this information for recruitment and workforce planning purposes, including assessing suitability for current or future opportunities.

The data collected may include your name, contact details, location, professional summary, areas of interest, and links to CVs or professional profiles.

Our lawful basis for processing recruitment-related data is consent and, where applicable, legitimate interests in maintaining a talent and consultant pipeline.

9. Your data protection rights

Under UK GDPR, you have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete data
Request deletion of your personal data
Request restriction of processing
Object to processing
Withdraw consent at any time (where consent is the lawful basis)
Request data portability (where applicable)

To exercise any of these rights, please contact:
privacy@surreynatureconsult.com

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

10. Cookies

Our website uses cookies to ensure it functions correctly and to record cookie consent preferences. We do not use analytics or marketing cookies.

For full details about how cookies are used, please see our Cookie Policy:
https://www.surreynatureconsult.com/cookie-policy/

11. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. Access to personal data is limited to authorised individuals and service providers.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our activities. Any updates will be posted on this page with a revised “Last updated” date.

13. Contact us

If you have any questions about this Privacy Policy or how we handle personal data, please contact:

Surrey Nature Consult Ltd
General enquiries: info@surreynatureconsult.com
Privacy enquiries: privacy@surreynatureconsult.com