This Privacy Policy tells you what you can expect us to do with your personal information. Data protection is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Policy sets out how and why we collect, use, and store personal information and explains your rights.
Christy Henshaw Consulting is a consultancy service that provides advice and support to organisations such as libraries, archives and museums about managing digital collections.
How we collect and use your data
We collect information in a variety of ways.
On this website
When you contact us via the website we capture your name, email address, and telephone number, as well as any information you send us in the comment section of the contact form. We do not automatically capture this information; it must be expressly provided by you via the contact form.
Through other forms of communication
We may also collect information such as name, email address, mailing address, job title and other information from you via email or telephone. We may access your data through publicly available websites or from professional contacts or service providers.
Browsing data
We automatically collect analytics data about your use of our website in order to understand how users use our site. This data is anonymous - it will not directly identify you. We capture data such as the device you are using to browse our site, what pages you visit, and what actions you take. We use carefully selected third-party providers to support our website operations including Google Analytics (Google LLC) to process anonymised browsing statistics and website traffic metrics (US-hosted). Website hosting and infrastructure is managed via secure UK/EU complaint server infrastructure. See our Cookie policy for more detail on how we track website usage.
Transfer of data
We will never sell your personal data. We will only share your personal data with others in the course of our work with your express permission.
Where data is processed outside the UK (for example, via Google Analytics servers and web hosting providers in the United States), we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or adequacy decisions, in compliance with GDPR rules.
How long we keep your data
We keep your personal data as long as is required to complete our services. Once our services have completed, or where no services are required, we will store your data for a maximum of five years. We store your data in secure systems compliant with UK GDPR guidelines.
Our lawful basis for collection and use of your data
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of lawful bases in the UK GDPR. You can find out more about lawful bases and your data protection rights on the ICO’s website.
Your rights may include:
Right of access: Request copies of your personal data.
Right to rectification: Ask us to correct inaccurate or incomplete information.
Right to erasure: Ask us to delete your personal data under certain conditions.
Right to restriction / objection: Object to or restrict how we process your data (including where we rely on legitimate interests).
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
Legitimate interests
It is in our “legitimate interest” to respond to enquiries and manage potential client relationships, enabling us to provide and improve our products and services. We can collect and use your information because it benefits you, your organisation or someone else, without causing undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
For more information on our use of legitimate interests as a lawful basis you can contact us using the details set out below.
Where you have provided consent
We collect and store personal information for:
- dealing with queries, complaints or claims
- providing information updates or marketing
We will only collect and store your personal information for these activities where we have permission from you after we gave you all the relevant information. All of your data rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Under contract
We collect and store personal information for the operation of client or customer accounts. All of your data protection rights may apply except the right to object.
To contact us
If you have any concerns about our use of your personal information, or if you have a complaint, you can make a data protection complaint to us:
Data Controller: Christy Henshaw, trading as Christy Henshaw Consulting, Horsham, West Sussex, United Kingdom
Email: privacy@henshawconsulting.co.uk
If you remain unhappy with how we have used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Copyright
Unless otherwise indicated, all text, designs and logos on this website are in copyright to Christy Henshaw and may not be used for any purpose restricted by international copyright laws. This includes copying, sharing or adapting.
Images used on this site are in copyright unless otherwise indicated. Images in copyright to Christy Henshaw have been dedicated to the public domain and are re-usable under the Creative Commons Zero (CC0) 1.0 licence.
Any other images will be clearly credited on the site as appropriate. Users must not copy, share, adapt or remix images in any way not permitted by the associated licence, unless by permission of the copyright owner. Images that are in the public domain in the UK are noted as "Public Domain" in the credit line.
Artificial Intelligence
Artificial intelligence (AI) tools have been used in creating design and content elements on this website. All AI-assisted content has been reviewed by a human and fact-checked where appropriate before publication. Any AI generated elements in the content of this site are intended to reflect the author's views, knowledge and professional judgement.