Privacy Notice
Last reviewed: July 2026
Summary
Clark & Company Information Governance Services takes your privacy seriously. Here is what you need to know in plain terms.
We collect only what we need. We do not share your data with third parties for marketing purposes. We do not use cookies or tracking tools that collect personal data. You have rights over your personal data and we will always respond to requests promptly.
If you have a question about how we use your data, contact Craig Clark at craig@ccinfogov.co.uk or on 07720 641550.
Our ICO registration number is ZA775179.
Who we are
Clark & Company Information Governance Services is a specialist information governance practice registered in England and Wales. Company number 12357112. Registered address: Tyler House, Morley Road, Tonbridge, Kent, TN9 1RA.
For the purposes of this notice, Clark & Company Information Governance Services is the Data Controller for personal data collected through this website.
What personal data we collect and why
Enquiries
If you contact us using the enquiry form on this website, we collect your name, organisation, email address, and any information you provide in your message. We use this data only to respond to your enquiry. Our lawful basis is legitimate interests. You have contacted us and we have a legitimate interest in responding.
Downloading our resources and briefings
If you download one of our free resources, we collect your first name, last name, work email address, and organisation. We use this data to send you the requested resource and occasional relevant updates about our work. You can unsubscribe from our communications at any time by clicking the unsubscribe link in any email we send. Our lawful basis is legitimate interests. Subsequent email communications are sent on the basis of the soft opt-in provisions under PECR but again you can unsubscribe at any time.
Shop purchases
If you purchase a product from our shop, we collect the information necessary to process your order, including your name, email address, and billing details. Payment processing is handled by Stripe. Clark & Company does not store your payment card details. Our lawful basis is performance of a contract.
Providing services
When we work with you on an engagement, we may receive personal data about third parties such as staff, students, or others associated with your organisation. This data is used only for the purpose of the engagement and never for any other purpose. When we act on your instructions in this context, we are a Data Processor and you are the Data Controller. Our lawful basis is performance of a contract.
What we do not collect
This website uses Plausible Analytics, a privacy-respecting analytics tool. Plausible does not use cookies, does not collect personal data, and does not track individual visitors. No cookie consent banner is required. We do not use Google Analytics, Google Tag Manager, Facebook Pixel, or any other third-party tracking tool.
Who we share your data with
We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only in the following limited circumstances.
Mailchimp. Email delivery for lead magnet sequences and subscriber communications. Mailchimp processes data on our behalf as a Data Processor under a data processing agreement.
Stripe. Payment processing for shop purchases. Stripe processes payment data as an independent Data Controller under its own privacy policy.
Statutory disclosure. We may be required to share data with regulatory bodies, law enforcement, or courts where the law requires us to do so.
Your rights
You have the following rights in relation to the personal data we hold about you.
Right of access. You can request a copy of the personal data we hold about you.
Right to rectification. You can ask us to correct personal data you believe is inaccurate.
Right to erasure. You can ask us to delete personal data we no longer have a legitimate purpose to hold.
Right to data portability. You can ask us to provide your data in a portable format.
Right to object. You can object to our processing of personal data where we do not have a legal or contractual obligation to process it.
Right to restrict processing. You can ask us to restrict how we use your data in certain circumstances.
Right not to be subject to automated decision-making. We do not make automated decisions about individuals using their personal data.
Right to complain. If you believe we have mishandled your personal data, you have the right to complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.
To exercise any of these rights, contact Craig Clark at craig@ccinfogov.co.uk.
How long we keep your data
Enquiry and contact data. Retained for one year after the conclusion of the relevant conversation or engagement, then reviewed for relevance.
Lead magnet subscriber data. Retained for as long as you remain an active subscriber. If you unsubscribe, your data is deleted within 30 days.
Engagement records and work product. Retained for a minimum of six years after the conclusion of an engagement, then reviewed for continuing relevance.
Proposals, invoices, and financial records. Retained for a minimum of seven years in line with HMRC requirements, then reviewed for continuing relevance.
Shop order data. Retained for seven years in line with financial record-keeping obligations.
How we keep your data secure
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to your data is limited to those who need it. All data shared with us for engagement purposes is exchanged via secure channels.
Changes to this notice
We review this notice periodically and update it when our practices change. The date at the top of this page reflects when it was last reviewed. Continued use of this website following an update constitutes acceptance of the revised notice.
Contact
Craig Clark, Director
Clark & Company Information Governance Services
craig@ccinfogov.co.uk
07720 641550
ccinfogov.co.uk