Legal

Privacy Policy

Last updated: September 2026

Introduction

Osborn Associates Ltd ("we", "us", "our") is committed to protecting the privacy and security of personal information. This privacy policy describes how we collect, use, store and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Osborn Associates Ltd is a company registered in England and Wales (Company Registration Number 02935660) with its registered office at South Barn, Crockham Park, Edenbridge, Kent TN8 6SR. We are registered with the Information Commissioner's Office under registration number ZA537152.

Information We Collect

We may collect and process the following categories of personal data:

Name, email address, telephone number and organisation when you contact us or submit an enquiry
Professional information such as job title and company name
Project-related information you provide in correspondence or through our contact form
Limited technical data, such as IP address and browser type, recorded automatically by our hosting and security provider in order to deliver and protect the website
CV and application details if you apply for a role with us

We do not use website analytics and we do not track visitor behaviour. See the Cookies section below for further detail.

Enquiries submitted through the form on our contact page are received and stored on a customer relationship management platform operated on our behalf by our website provider, and are then forwarded to us by email.

How We Use Your Information

We use your personal data for the following purposes:

To respond to your enquiries and provide the services you have requested
To manage our contractual relationships with clients, partners and suppliers
To process job applications and manage recruitment
To send you relevant information about our services where you have consented
To improve the quality of our services
To comply with legal and regulatory obligations

Legal Basis for Processing

We process personal data on the following legal bases:

Contractual necessity - where processing is necessary to perform a contract with you
Legitimate interests - such as responding to enquiries, improving our services and maintaining business relationships
Consent - where you have given us specific consent for a particular purpose
Legal obligation - where processing is necessary to comply with a legal or regulatory obligation

Data Sharing

We do not sell, trade or rent your personal data to third parties. We may share your information with trusted third parties in the following circumstances:

Service providers who assist us in operating our website or providing services to you
Professional advisers including lawyers, auditors and insurers where necessary
Regulatory authorities, law enforcement or other bodies where required by law

Our website is hosted and protected by Cloudflare, which processes limited technical data on our behalf in order to deliver the site and defend it against automated attacks.

The enquiry form on our contact page is provided through LeadConnector, a customer relationship management platform operated by HighLevel Inc. and administered on our behalf by our website provider. Details you submit through the form are held on that platform and forwarded to us by email. These providers act as our processors and are not permitted to use your information for their own purposes.

International Transfers

Some of our service providers operate global infrastructure and may process data outside the United Kingdom. In particular, the platform that receives enquiries submitted through our contact form is operated by a company based in the United States. Where personal data is transferred outside the UK, we take steps to ensure it remains protected by appropriate safeguards, such as UK adequacy regulations, the UK extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.

For enquiries that do not result in a business relationship, we will typically retain your data for no longer than two years. This includes the copy of your enquiry held on the platform that receives our contact form submissions. For client and project-related data, we retain information for a period appropriate to professional indemnity and contractual obligations.

Data Security

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.

We are certified to Cyber Essentials Plus, the UK government-backed scheme that requires independent technical testing of an organisation's defences against common cyber attacks. Our certification is issued through IASME and covers the whole organisation. We also operate a quality management system certified to ISO 9001:2015.

Your Rights

Under data protection legislation, you have the following rights:

The right to access the personal data we hold about you
The right to request correction of inaccurate or incomplete data
The right to request deletion of your data in certain circumstances
The right to restrict or object to the processing of your data
The right to data portability
The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details below. We will respond within one month.

Cookies

We do not use analytics, advertising or tracking cookies on this website. We do not operate Google Analytics or any comparable measurement tool, we do not build profiles of visitors, and we do not track your activity across other websites.

Our website is hosted and protected by Cloudflare. Cloudflare may set a small number of strictly necessary cookies for security purposes, for example to distinguish genuine visitors from automated traffic and to maintain the availability of the site. These cookies are essential to the operation and security of the website, are not used to identify you personally, and are exempt from the consent requirements of the Privacy and Electronic Communications Regulations.

Our contact page embeds an enquiry form supplied by LeadConnector. Loading that page will load content and scripts from LeadConnector's servers, and the provider may set its own cookies in order to operate the form and guard against spam submissions. That processing is governed by the provider's own privacy policy. The rest of our website does not load third-party content.

If we introduce analytics or any other non-essential cookies in future, we will update this policy and obtain your consent beforehand. You can block or delete cookies through your browser settings, although blocking strictly necessary cookies may affect how the site functions.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

Complaints

If you have any concerns about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), with whom we are registered under number ZA537152, at ico.org.uk.

Data Protection Contact

If you have any questions about this privacy policy or our data practices, please contact us.

Email admin@osbornassociates.com Post Osborn Associates Ltd
South Barn, Crockham Park
Edenbridge, Kent TN8 6SR