Privacy Policy
Last updated: September 2026
Gap Consultants Ltd (“Gap Consultants”, “we”, “us”) is the controller of personal information collected through this website and in connection with enquiries about our services.
Information we collect
When you contact us, we may collect your name, business email address, telephone number, organisation, role, enquiry details and any other information you choose to provide. We may also receive ordinary technical information needed to operate and secure the website, such as IP address, browser information and server logs.
Please do not send special-category, confidential or highly sensitive information through the initial enquiry form.
Why we use your information
- To respond to enquiries and arrange discussions.
- To assess and provide consulting, diagnostic and advisory services.
- To manage proposals, contracts, client relationships and business administration.
- To protect the website, prevent misuse and meet legal or regulatory obligations.
- Where appropriate, to maintain relevant business relationships and communicate about our services.
Lawful bases
Depending on the circumstances, we rely on steps taken at your request before entering a contract, performance of a contract, our legitimate interests in operating and developing a professional consulting business, compliance with legal obligations, and consent where we specifically request it. You may withdraw consent at any time, although this does not affect earlier lawful processing.
Website analytics and cookies
With your consent, we use Google Analytics 4 through Google Site Kit to understand how visitors find and use the website. This may involve processing information such as pages viewed, referral source, device and browser type, general location derived from an IP address, and engagement with the website. We use this information to improve the website and our services; we do not use it for advertising.
For UK visitors, analytics storage is denied by default and enabled only after a visitor accepts statistics cookies. Google may process analytics information as our service provider. You can accept, deny or change your choice through the website consent controls. Further details, including the cookies used and their retention periods, are provided in our Cookie Policy.
Sharing and service providers
We do not sell your personal information. We may share it with trusted providers that support website hosting, forms, email, professional services and secure business administration, or where disclosure is required by law. Providers are expected to use information only for the services they provide to us and to protect it appropriately.
Where a provider processes information outside the UK, we seek to use an appropriate UK data-transfer safeguard where one is required.
Retention
We normally retain an initial enquiry for up to 24 months so that we can respond and maintain an appropriate record of the relationship. If an enquiry leads to an engagement, relevant client, contractual, financial and compliance records may be retained for up to seven years after the relationship ends, or longer where law, a dispute or professional requirements make this necessary. Technical security records are retained only as long as reasonably needed.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict your information, object to its use, and receive certain information in a portable form. These rights are not absolute and exemptions may apply.
You have the right to object at any time to processing for direct marketing.
Contact and complaints
To ask a privacy question or exercise a right, contact David Roberts through the website Contact page. We may need to verify your identity before acting on a request.
You may also complain to the Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113.
Changes to this notice
We may update this notice when our services or data practices change. The latest version will be published on this page.