1. Introduction
Aven Brook Consulting Ltd ("we", "us", "our") is a company registered in England and Wales (Company number 13906354) with its registered office at 71–75 Shelton Street, London WC2H 9JQ.
We take the privacy and security of personal data seriously. This Privacy Policy explains how we collect, use, store and protect personal data, and outlines your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR).
This Privacy Policy applies to all services provided by Aven Brook Consulting Ltd, including but not limited to, marketing consultancy, business advisory services, and executive coaching delivered as part of our consulting offering.
2. How to Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us:
- By email: info@avenbrookconsulting.com
- By post: Aven Brook Consulting Ltd, 71–75 Shelton Street, London WC2H 9JQ
We do not have a designated Data Protection Officer. Queries will be handled directly by the company.
3. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or how we operate. The most recent version will always be available on our website.
Last updated: January 2026
4. Lawful Bases for Processing Personal Data
We only process personal data where we have a lawful basis to do so. These include:
- Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legitimate Interests: where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.
- Legal Obligation: where processing is required to comply with a legal or regulatory obligation.
- Consent: where you have given clear consent for us to process your data for a specific purpose.
Where we rely on consent, you may withdraw it at any time.
5. If You Do Not Provide Personal Data
Certain personal data is required for us to provide our services. If you do not provide requested information, we may be unable to deliver services or respond to enquiries.
6. Keeping Your Information Accurate
It is important that the personal data we hold about you is accurate and up to date. Please inform us if your details change.
7. What Personal Data We Collect (Website and Business Administration)
This Privacy Policy primarily covers personal data collected through our website and routine business administration activities.
Depending on how you interact with us, we may collect:
- Identity data: name, job title, company name
- Contact data: email address, phone number, postal address
- Business information: company details, role, high‑level commercial context provided via enquiries or booking forms
- Transaction data: services purchased, invoicing status and payment records (we do not store full payment card details)
- Marketing data: communication preferences, newsletter subscriptions
- Technical data: IP address, browser type, device information, website usage data
This information is typically collected when you contact us, submit an enquiry, book a meeting, subscribe to communications, or engage our services.
Client work and confidentiality
Information shared within the scope of active consulting or executive coaching engagements is governed by contractual terms and confidentiality obligations (including NDAs and service agreements). Such information is processed solely for the purpose of delivering agreed services and is handled with strict confidentiality. Any sensitive personal information shared within client engagements is processed only where necessary and in accordance with applicable data protection law.
8. How We Collect Personal Data
We collect personal data when you:
- Contact us via our website, email or telephone
- Book meetings or consultations
- Subscribe to communications or download resources
- Enter into a consulting or coaching engagement with us
We also collect limited technical data automatically through cookies and analytics tools when you visit our website.
9. How We Use Personal Data
We use personal data to:
- Provide and manage our services
- Respond to enquiries and communications
- Manage client relationships and contracts
- Send relevant business or marketing communications
- Improve our services and website
- Comply with legal, accounting and regulatory obligations
10. Marketing Communications
You may receive marketing communications from us where:
- You have opted in; or
- We have an existing business relationship and a lawful basis to contact you
All marketing emails include an option to unsubscribe or manage preferences. Opting out of marketing will not affect service-related communications.
We do not sell or share personal data with third parties for their own marketing purposes.
11. Data Sharing and Third-Party Processors
We may share personal data with trusted third-party service providers who support our operations, including:
- Website hosting providers
- Email and communication platforms
- Scheduling and booking systems
- Analytics providers
- Accounting and professional advisors
These providers act as data processors and are required to handle data securely and in accordance with applicable data protection laws.
12. International Data Transfers
Some service providers may be located outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
13. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
- Delivering services
- Meeting legal, accounting and tax obligations
- Managing potential disputes or claims
Retention periods vary depending on the nature of the data and the reason for processing.
14. Your Rights
Under UK data protection law, you have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request erasure of your data (in certain circumstances)
- Request restriction of processing
- Object to processing, including direct marketing
- Request data portability
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details above. We may need to verify your identity before responding.
15. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.
16. Complaints
If you have concerns about how we handle your personal data, please contact us first so we can address the issue.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at http://www.ico.org.uk