Privacy notice.

Last updated: 8 July 2026

Who we are

Indigo Privacy Solutions Limited (“Indigo Privacy Solutions”, “we”, “us”) is a data protection and privacy consultancy registered in England & Wales, company number 14688687 and ICO registration ZB564118, with its registered office at 3 Plough Lane, East Dulwich, London, SE22 8JL, United Kingdom.

We are the controller for the personal data described in this notice. If you have any questions about how we handle your data, contact us at info@indigoprivacysolutions.co.uk.

What information we collect

We collect personal data directly from you, mainly when you:

• Email us with an enquiry, including your name, email address, any company name and the content of your message;
• Book a call with us, including any scheduling and contact details you provide;
• Engage us for services, including the information needed to deliver and invoice that engagement;
• Visit our website, which may generate limited technical data (such as browser type and pages visited) via our hosting provider's standard server logs.

We do not use cookies on this site, and we do not knowingly collect information from children.

We do not use your personal data to make automated decisions or to create a profile.

Contacting us by email

Our website does not use a contact form. When you get in touch using the email address on our contact page, we receive the information you choose to include — typically your name, email address, any company or organisation and the content of your message — together with the standard technical information your own email service attaches to any message. We use these details only to respond to you.

How we use your information

We use personal data to:

• Respond to your enquiry and arrange calls or meetings;
• Provide, manage and invoice our consultancy services;
• Maintain our own business records, including accounting and legal compliance.

Our legal basis for processing

We rely on the following lawful bases under UK GDPR:

• Legitimate interests — to respond to enquiries about our services and to process server logs for website development and security, in a way that does not override your rights;
• Contract — to perform a contract with you or your organisation, or to take steps at your request before entering into one;
• Legal obligation — to meet accounting, tax and other regulatory requirements.

Who we share it with

We do not sell personal data. We may share it with trusted third parties who support our business operations, such as our email, scheduling, accounting and IT service providers, each bound by appropriate confidentiality and data protection terms. We may also disclose data where required by law or to protect our legal rights.

International transfers

Some of our service providers may store or process personal data outside the UK. Where they do, we ensure an appropriate safeguard is in place — such as the country being covered by UK ‘adequacy’ regulations, or the UK’s International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses).

How long we keep it

We keep enquiry data for as long as needed to respond and follow up, and no longer than 24 months if no engagement results. Client and contractual records are kept for the period required by our engagement terms and by law, generally up to 7 years for accounting and tax purposes.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Have inaccurate data corrected;
• Ask us to erase your data, in certain circumstances;
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent (although we don't use your personal data to promote our services, and none of our processing is based on consent).

To exercise any of these rights, email info@indigoprivacysolutions.co.uk. If you are unhappy with how we have handled your personal data, please see ‘How to complain’ below.

How to complain

If you have a concern about how we have handled your personal data, we would like the chance to put it right. Please contact us at info@indigoprivacysolutions.co.uk, marking your message for the attention of our data protection lead, and tell us what has gone wrong and how you would like it resolved.

In line with the complaint-handling duties introduced by the Data (Use and Access) Act 2025, we will:

• acknowledge your complaint within 30 days of receiving it;
• investigate it in a way that is reasonable and proportionate to the issues you raise;
• keep you informed of our progress, and of any expected delay, where the investigation takes longer; and
• tell you the outcome without undue delay.

You also have the right to complain directly to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at any time. The ICO may ask whether you have first raised your complaint with us, so contacting us first will often lead to a quicker resolution.

Changes to this notice

We may update this notice from time to time to reflect changes in our practices or the law. The date at the top shows when it was last revised.

Contact us

Indigo Privacy Solutions Limited
3 Plough Lane, East Dulwich, London, SE22 8JL, United Kingdom
Email: info@indigoprivacysolutions.co.uk