Opes Consulting Back to site

Legal

Privacy Policy

Last updated 18 September 2026

This policy explains what personal data Opes Consulting collects when you use this website, book a discovery call, sign up to our newsletter or create an account for our free guide. It covers what we do with that data and the rights you have over it.

Who we are

Opes Consulting (“we”, “us”) is the data controller for the personal data described in this policy.

Name
Opes Consulting
Based in
London, United Kingdom

What we collect, and why

Booking a discovery call

Before you pick a time on our booking page, we ask a few questions so we can come to the call prepared. We collect:

  • Your name, email address and phone number, so we can confirm the call and reach you about it
  • Your website, so we can look at your business before we speak
  • Your estimated monthly revenue, so we can tell whether we are the right fit
  • Your goals and challenges, what made you book, and where you heard about us, in your own words
  • The time you book, which goes in our calendar with a Google Meet link

If you answer the questions but do not go on to book, we keep your answers so we can follow up once about the call. We use all of this only to prepare for and hold the call and, if it goes further, to discuss working together.

Other enquiries

If you email or message us, we use the details you give us to reply.

Newsletter signup

When you sign up through the popup on this site, we collect:

  • Your first name, so we can address the emails to you
  • Your email address, so we can send you the newsletter
  • Your consent, a record that you ticked the box, and when
  • The source, which part of the site you signed up from

We use this only to send you the newsletter: marketing tactics, teardowns and commentary on lifecycle and email marketing, roughly once a month.

The free lifecycle guide

The guide on our free resources site is behind a sign in. To read it you create an account, which collects:

  • Your full name and, if you choose to give it, your company
  • Your email address, which is your sign in and where the confirmation link goes
  • A password, handled by Supabase Auth, which stores it hashed. We never see it in a readable form
  • Your account status, whether access is active and when you signed up
  • Your newsletter choice, if you tick the box to get the newsletter as well

We ask you to confirm your address by clicking a link we email you. That keeps invented addresses out of our list.

Creating an account does not sign you up to the newsletter. You only get it if you tick the separate newsletter box on the sign up form. The box starts unticked.

We do not sell your data, and we do not share it for anyone else’s marketing.

Our lawful basis

For the newsletter, including if you opt in when creating a guide account, our lawful basis is your consent (UK GDPR Article 6(1)(a)). You give it by ticking the box. You can withdraw it at any time (see Your rights), and withdrawing it does not affect anything we did with your data before you withdrew it.

For the guide account, our lawful basis is performance of a contract (Article 6(1)(b)). You asked for the guide and the account is how we give it to you.

For discovery calls and other enquiries, our lawful basis is legitimate interests (Article 6(1)(f)): preparing for and responding to someone who has asked to speak with us about our services.

For the Meta pixel and HubSpot analytics, our lawful basis is your consent, given through the cookie bar. See Cookies and storage.

Who else handles your data

We use a small number of processors. Each one only handles your data on our instructions.

HubSpot
Our CRM. Stores your discovery call answers and booking, runs the booking calendar, and runs website analytics if you accept them. Data is held in HubSpot’s EU data centre.
Google
Google Calendar and Google Meet, for the call itself. Your name, email and the booked time go on the calendar invite.
Supabase
Stores the newsletter list, the guide accounts and the guide content, and runs the guide sign in. Data is held in the EU.
Cloudflare
Hosts and serves this website and the free resources site.
Meta
Only if you accept the pixel. See Cookies and storage.

Where data is held in the EU, the UK recognises the EU as giving adequate protection, so no extra safeguards are needed. Where a provider may access data from outside the UK and EU, such as the United States, the transfer is covered by the UK’s adequacy regulations for the US Data Bridge or by the International Data Transfer Agreement, as UK GDPR requires.

How long we keep it

We keep your newsletter details until you unsubscribe or ask us to delete them. If you unsubscribe we keep a minimal suppression record (your email address and the fact you opted out) so that we do not email you again by mistake. That record is kept indefinitely, because deleting it would defeat its purpose.

Your guide account stays until you ask us to delete it. Ask and we remove the account, the profile behind it and your access, and you lose the guide with it.

Discovery call answers and other enquiries are kept for 12 months after our last contact, unless you become a client, in which case our agreement with you sets how long we keep it.

Your rights

Under UK GDPR you have the right to:

  • Ask what personal data we hold about you, and get a copy
  • Have inaccurate data corrected
  • Have your data erased
  • Restrict or object to how we use it
  • Receive your data in a portable format
  • Withdraw your consent at any time

The fastest way to leave the newsletter is the unsubscribe link at the bottom of any email we send. One click, no questions. For anything else, email us at aran@opesconsulting.online and we will respond within one month.

If you are not happy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

Cookies and storage

Nothing that tracks you runs unless you say yes. When you first arrive we ask, in a bar at the bottom of the page, whether we may use the Meta advertising pixel and HubSpot analytics. Decline, or ignore the bar, and neither one loads. Nothing on this site needs them in order to work.

If you accept:

  • The Meta pixel lets us see which of our ads brought people here and which of those people went on to book a call. That data goes to Meta, whose privacy policy covers what they do with it. The pixel sets its own cookies on your device.
  • HubSpot analytics records which pages you visit, so that if you book a call we can see how you found us. It sets its own cookies on your device. HubSpot’s privacy policy has the details.

The booking calendar on our booking page is provided by HubSpot and loads whatever you choose in the cookie bar, because it is the service you came to use. It may set cookies that it needs to work.

These are kept in your own browser, on your own device:

  • Your cookie choice, so we do not ask again on every page. It records only whether you accepted or declined.
  • A newsletter pop up flag, so the pop up does not come back once you have closed it or joined.
  • A sign in session for the free guide, so you stay signed in between pages and visits. This one is strictly necessary, because the sign in could not work without it. Signing out removes it.
  • Which ad you came from. If you arrived by clicking one of our ads, we keep the campaign details so we can tell which ad led to a booking. Only stored if you accepted.

Changed your mind? Clearing this site’s data in your browser resets your choice and we will ask again next time. You can also manage what Meta shows you in your Meta ad settings.

Changes to this policy

If we change this policy we will update the date at the top. If the change is significant, we will tell subscribers by email.