I collect what I need to talk to you, do the work and get paid, and nothing else. I don't sell it, I don't share it for anybody's marketing, and I don't use it to make automated decisions about you. This site sets no cookies of its own and runs no advertising trackers. The rest of this page is the detail the law asks for, in plain English.
I'm Ian Sharpe, a sole trader trading as ConsultingPartner.io, and I'm responsible for your personal data (the "controller", in the law's word). Questions about anything on this page go to [email protected].
When you book a call: your name, email address, the business it's about, what you'd like to talk through, the time you chose, and that you agreed to the small print. I use it to hold the time, send the Zoom link and a reminder, and prepare. A paid session also gives me a record from Stripe that you paid; I never see your card details.
When you send a message: your name, email address, business, what you asked about, the page you came from and your message, so I can reply.
When you sign up for the letter: your email address, and when and how you confirmed. Sign-up is confirmed twice: nothing is sent until you click the link in the first email. Every letter has an unsubscribe link.
If you become a client: contact details, the statement of work, invoices, payments and the notes I keep about the work.
When you visit the site: the site is hosted on Cloudflare, which sees the requests any web host sees. Cloudflare Web Analytics counts page views without cookies and without identifying you. Cloudflare Turnstile checks that a form is sent by a person rather than a script, and only runs on the forms. Stripe's payment form only loads when you pay. A page that shows a price asks my own booking system for today's figure as it loads; nothing about you goes with the request.
Bookings, replies to your messages and client work: to take steps you've asked for before a contract, and then to perform it. Invoices and payment records: because tax law requires me to keep them. The letter: your consent, which you can withdraw at any time. Keeping the site and its forms safe from abuse: my legitimate interest in running it securely.
A handful of services process data on my behalf, each under its own data protection terms: Cloudflare (hosting, the booking and office systems, storage, backups, analytics and the spam check), Resend (the emails this site and my booking system send you, and the letter's mailing list), Stripe (card payments), Zoom (the calls themselves) and Apple iCloud (my mailbox, where your emails and replies arrive). My bank handles payments by bank transfer. Some of these are based in, or use servers in, the United States; where that's the case, the transfer is covered by the UK's data bridge with the US or by the standard contractual clauses the law approves.
Enquiries, and calls that didn't lead to any work: two years after we were last in touch, then deleted automatically. Client records, invoices and payment records: six years after the end of the tax year they relate to, because tax law asks for that. The letter: until you unsubscribe, after which I keep only a note that you left, so you're never added back by mistake. Encrypted backups: twelve months.
You can ask for a copy of what I hold about you, ask me to correct it, delete it, restrict or object to how I use it, or have it sent to you in a form a machine can read. Write to [email protected] and I'll answer within a month, usually much sooner. Some records, such as invoices, I have to keep even if you ask me to delete them; if so, I'll tell you which and why.
If you're unhappy with how I've handled your data, please tell me first and I'll put it right. You can also complain to the Information Commissioner's Office at ico.org.uk.
If this page changes in a way that matters, the date at the top changes with it. How the commercial side works is in the Terms of Business.