Privacy Policy

This policy explains what personal information Bednarek Consulting Ltd collects when you visit this website or get in touch, why we collect it, and what your rights are. We’ve tried to write it in plain English rather than legal fog. If anything here isn’t clear, email us and we’ll explain it properly.

Who we are

Bednarek Consulting Ltd is a digital consultancy registered in England and Wales.

  • Company number: 16310158
  • Registered office: 5th Floor, 167–169 Great Portland Street, London, W1W 5PF
  • ICO registration reference: ZC022149

For anything to do with your personal data, contact us at [email protected].

We are the “data controller” for the information described in this policy. In plain terms, that means we decide what data is collected through this website and how it’s used, and we’re responsible for looking after it.

(A note for clients: when we build or run a website for you, we usually handle your customers’ data on your instructions. In that situation you are the controller and we act as your processor. That relationship is governed by our Client Services Agreement, not by this policy.)

What we collect and why

We keep data collection to the minimum. Here’s the full picture.

When you contact us.

If you fill in a form, email us, or reach out through the site, we collect your name, email address, and whatever you choose to tell us about your business or enquiry. We use this to reply to you and, if we go on to work together, to set up and run the project. The lawful basis is our legitimate interest in responding to enquiries, and, once we’re working together, performance of a contract.

When you browse.

Like most websites, ours collects some technical information automatically – the pages you visit, roughly where in the world you are, your browser and device type, and how you arrived. This comes through analytics tools (see below) and helps us understand what’s useful and keep the site working. The lawful basis is your consent, given through our cookie banner, and our legitimate interest in a functioning, well-understood website.

When you become a client.

We collect the information needed to deliver our services and run the commercial relationship – contact details, billing information, and the project material you share with us. The lawful basis is performance of our contract with you, and compliance with our legal obligations (for example, keeping records for tax).

We do not knowingly collect data from anyone under 18, and this website is not aimed at children.

Cookies and analytics

A cookie is a small text file a website stores on your device. Some are needed for the site to work; others help us understand how the site is used. We don’t set non-essential cookies until you’ve agreed through the cookie banner.

We use, or expect to use, the following:

  • Google Analytics 4 and Google Tag Manager – to measure how the site is used and manage our tracking tags. These set cookies and may transfer data to Google.

  • Google Search Console – to see how the site performs in search. This works from server data and doesn’t set cookies on your device.

  • LinkedIn Insight Tag – to measure the effectiveness of any LinkedIn advertising and understand visitor trends. This sets cookies and shares data with LinkedIn.

You can refuse or withdraw consent to non-essential cookies at any time using the cookie settings on the site, or by blocking cookies in your browser. Turning them off won’t stop you using the site.

Google and LinkedIn operate their own privacy policies covering what they do with the data they receive, and we’d encourage you to read them.

Who we share your data with

We don’t sell your data, and we don’t share it for anyone else’s marketing. We do rely on a small number of trusted suppliers who process data on our behalf so we can run the business:

  • WP Engine – our website hosting provider, which stores the site and its data on secure servers.

  • Google and LinkedIn – for the analytics and advertising tools described above.

  • Our email, invoicing, and accounting providers – to correspond with you and meet our financial and tax obligations.

Each of these is bound by its own data protection obligations. We may also disclose information if we’re legally required to – for example, to a regulator or in response to a valid court order.

Sending data outside the UK

Some of our suppliers, including Google and LinkedIn, are based outside the UK or process data internationally. Where personal data is transferred outside the UK, we rely on the safeguards recognised under UK data protection law – such as International Data Transfer Agreements, the UK Addendum to the EU Standard Contractual Clauses, or a country that the UK government has ruled offers adequate protection.

How long we keep it

We don’t keep personal data longer than we need to.

  • Enquiries that don’t turn into work – kept for up to 12 months, then deleted.

  • Client records – kept for the duration of our relationship and then for up to six years afterwards, to meet legal, tax, and accounting requirements.

  • Analytics data – retained according to the settings in the relevant tool, which are generally between two and fourteen months.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct anything that’s wrong;
  • ask us to delete your data, where there’s no overriding reason to keep it;
  • object to, or ask us to restrict, how we use it;
  • withdraw consent at any time, where consent is what we relied on;
  • ask us to transfer your data to another provider, where that applies.

To exercise any of these, email us at [email protected]. We’ll respond within one month. There’s no charge unless the request is clearly unfounded or excessive.

If you’re not happy with how we’ve handled your data, we’d rather you told us first so we can put it right. But you also have the right to complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.

Keeping your data safe

We take sensible, proportionate steps to protect the information we hold – secure hosting, access controls, and suppliers chosen partly on the strength of their security. No system is ever completely immune, but we treat your data with the care we’d want for our own.

Changes to this policy

We’ll update this policy from time to time as our tools or obligations change. The dates below tells you when it was last revised. Significant changes will be flagged on this page.

Questions about our Privacy Policy? Email us at [email protected].

Privacy Policy Published: March 2025

Privacy Policy Updated: July 2026