Legal
Privacy Policy
Last updated [ DATE ] · Applies to the Opes Consulting newsletter and website
Draft — read this before publishing. Every highlighted field needs your real details, and the whole document needs a read-through by someone qualified. I am not a lawyer and this is not legal advice. It is written to cover what UK GDPR asks for given what your sign-up form actually collects, but the responsibility for it being accurate is yours. Delete this box once you have checked it.
This policy explains what personal data Opes Consulting collects when you sign up to our newsletter or use this website, what we do with it, and the rights you have over it.
Who we are
Opes Consulting (“we”, “us”) is the data controller for the personal data described in this policy.
- Trading name
- Opes Consulting
- Registered company name
- [ REGISTERED NAME ]
- Company number
- [ COMPANY NUMBER ]
- Registered address
- [ REGISTERED ADDRESS ]
- Contact
- [ hello@yourdomain.co.uk ]
What we collect, and why
Newsletter sign-up
When you sign up through the pop-up on this site, we collect:
- Your first name — so we can address the emails to you
- Your email address — so we can send you the newsletter
- Your consent — a record that you ticked the box, and when
- The source — which part of the site you signed up from
We use this only to send you the newsletter: marketing tactics, teardowns and commentary on lifecycle and email marketing, roughly once a month. We do not sell your data, and we do not share it for anyone else's marketing.
Enquiries
If you contact us or book a call, we process the details you give us in order to reply and, if it goes further, to discuss working together.
Our lawful basis
For the newsletter, our lawful basis is your consent (UK GDPR Article 6(1)(a)). You give it by ticking the box on the sign-up form. You can withdraw it at any time — see Your rights — and withdrawing it does not affect anything we did with your data before you withdrew it.
For enquiries, our lawful basis is legitimate interests (Article 6(1)(f)): responding to someone who has contacted us about our services.
Who else handles your data
We use a small number of processors to run the newsletter. Each one only handles your data on our instructions.
- Supabase
- Stores the subscriber list. [ CONFIRM YOUR PROJECT'S REGION ]
- Brevo
- Sends the newsletter, where enabled. EU-based (France).
- Cloudflare
- Hosts and serves this website.
Where a processor is outside the UK, the transfer is covered by the safeguards UK GDPR requires, such as the International Data Transfer Agreement or an adequacy decision. [ CONFIRM WHICH APPLIES ONCE YOU HAVE CHECKED YOUR SUPABASE REGION ]
How long we keep it
We keep your newsletter details until you unsubscribe or ask us to delete them. If you unsubscribe we keep a minimal suppression record — your email address and the fact you opted out — so that we do not accidentally email you again. That record is kept indefinitely, because deleting it would defeat its purpose.
Enquiry correspondence is kept for [ e.g. 24 months ] after our last contact, unless it becomes part of a client relationship with its own retention terms.
Your rights
Under UK GDPR you have the right to:
- Ask what personal data we hold about you, and get a copy
- Have inaccurate data corrected
- Have your data erased
- Restrict or object to how we use it
- Receive your data in a portable format
- Withdraw your consent at any time
The fastest way to withdraw consent is the unsubscribe link at the bottom of any email we send — one click, no questions. For anything else, email us at [ hello@yourdomain.co.uk ] and we will respond within one month.
If you are not happy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.
Cookies and analytics
[ THIS SECTION NEEDS YOUR INPUT. If the site sets no cookies and runs no analytics, say so plainly and delete the rest. If you add Google Analytics, Meta Pixel, or anything similar, you need a cookie banner and this section must list each one, what it does and how long it lasts. ]
The newsletter pop-up stores a small flag in your browser to remember that you have already seen or joined it, so it does not keep reappearing. It stays in your browser, is not sent to us, and holds no personal data.
Changes to this policy
If we change this policy we will update the date at the top. If the change is significant, we will tell subscribers by email.