GDPR privacy policy – Ian White

I am committed to protecting and respecting your privacy.

This notice sets out the basis on which any personal data I collect from you, or that you provide to me, will be processed by me.

The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a new regulation which replaces the Data Protection Regulation (Directive 95/46/EC). The Regulation aims to harmonise data protection legislation across EU member states, enhancing privacy rights for individuals and providing a strict framework within which commercial organisations can legally operate.

Even though the UK has expressed its intention to leave the EU, the GDPR will be applicable in the UK. The Government intends for the GDPR to continue in UK law post Brexit and has also introduced a Data Protection Bill to replace the current Data Protection Act in due course.

Your new rights under the GDPR are set out in this notice.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

Who I am and what I do

I am a sole trader providing management consultancy services principally in the areas of board effectiveness, governance, coaching, training and development.

We collect information about you to carry out our core business.

Information you give to me or we collect about you

This is information about you that you give me by corresponding with me by phone, email or otherwise. It includes information you provide when you enter my database or subscribe to my services.

The information you give me or I collect about you may include your name, address, demographic information such as postcode, private and corporate email address and phone number, financial information, or other business information.

Purposes of the processing and the legal basis for the processing

I use information held about you in the following ways:

  • To carry out my obligations arising from any contracts we intend to enter into or have entered into between you and me and to provide you with the information, products and services that you request from me or I think will be of interest to you because it is relevant to your organisation.
  • To provide you with information about other goods and services I offer that are similar to those that you have already purchased, been provided with or enquired about.

My legal basis for the processing of personal data is my legitimate business interests, described in more detail below, although I will also rely on contract, legal obligation and consent for specific uses of data.

I will rely on contract if I am negotiating or have entered into an agreement with you or your organisation or any other contract to provide services to you or receive services from you or your organisation.

I will rely on legal obligations if I am legally required to hold information on to you to fulfil my legal obligations.

I will in some circumstances rely on consent for particular uses of your data and you will be asked for your express consent, if legally required.

My legitimate business interests

My legitimate interests in collecting and retaining your personal data are described below:

To provide consultancy services in the areas of board effectiveness, governance, coaching, training and development.


Should I want or need to rely on consent to lawfully process your data I will request your consent orally, by email or by an online process for the specific activity I require consent for and record your response on my system.  Where consent is the lawful basis for our processing you have the right to withdraw your consent to this particular processing at any time.

Retention of your data

I understand my legal duty to retain accurate data and only retain personal data for as long as I need it for my legitimate business interests and that you are happy for me to do so.

Changes to my privacy notice

Any changes I make to my privacy notice in the future will, where appropriate, be notified to you by email.


Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to Ian White, 30 North View, Winchester, Hampshire  SO22 5EH.