PRIVACY POLICY
Last updated: 1st September 2026
TW People & Operations Advisory Ltd is committed to protecting your personal information and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website or contact us about our management, people, HR or operational consultancy services.
1. Who we are
Business name: TW People & Operations Advisory Ltd
Legal entity / trading status: TW People & Operations Advisory Ltd, trading as TW People & Operations Advisory
Registered / business address: Waterlooville, Hampshire, UK
Email: tanya@twpeopleops.co.uk
Company number: 17400318
For the purposes of UK data-protection law, we are the data controller for the personal information covered by this Privacy Policy.
2. Information we collect
We collect personal information that you choose to provide when you use our Contact Us form or contact us by email or telephone. This may include:
Your name.
Your work email address.
Your telephone number, if you choose to provide it.
Your organisation and job title, if you choose to provide them.
The contents of your message or enquiry.
Any other information you choose to provide when contacting us.
Our website is designed as a brochure site. We do not use advertising pixels, marketing tracking, visitor analytics, or profiling tools.
We do not intentionally collect special-category personal data—such as health information, trade-union membership, racial or ethnic-origin information, or detailed employee grievance, disciplinary or performance information—through our website contact form. Please do not include this type of information in an initial website enquiry.
3. How we use your information
We use your personal information to:
Read, assess and respond to your enquiry.
Discuss potential consultancy services or arrange an introductory call.
Take steps you ask us to take before entering into a consultancy agreement.
Maintain appropriate business records relating to enquiries and communications.
Protect the security and operation of our website, email and business systems.
Meet any legal, regulatory or accounting obligations that apply to us.
We will not sell your personal information. We will not use your contact-form details to send marketing emails or add you to a mailing list unless you separately ask us to do so or provide clear consent.
4. Our lawful basis
Under UK GDPR, we need a lawful basis to use your personal information.
For initial business enquiries, our lawful basis is normally our legitimate interests: operating and developing our consultancy, responding to enquiries, and communicating with prospective clients. We only use the information necessary for those purposes and consider that this use does not override your rights and interests.
Where you ask us to take steps before entering into a contract with you, or where we enter into a consultancy agreement with you, we may also use your information because it is necessary for a contract or to take steps at your request before entering into one.
Where we must retain or disclose information to comply with a legal obligation, our lawful basis is compliance with that legal obligation.
The ICO explains that legitimate interests requires a genuine purpose, necessity, and a balancing assessment against the individual’s rights and freedoms.ico
5. Who we share information with
We keep access to your personal information limited. We may share it only where necessary with trusted service providers that support our business, such as:
Our website hosting and contact-form provider: ionos/123-reg.
Our email and document-management provider: Microsoft 365 / Microsoft.
Our professional advisers, such as our accountant, insurer or legal adviser, where necessary.
Public authorities, regulators, law-enforcement bodies or other parties where we are legally required to share information or need to protect our legal rights.
These providers may process personal information on our behalf and are required to protect it appropriately. We do not sell or rent personal information to third parties.
6. International transfers
Some of our service providers may store or process personal information outside the United Kingdom. Where this happens, we will ensure that an appropriate safeguard is in place as required by UK data-protection law, such as a UK adequacy regulation or approved contractual safeguards.
7. How long we keep information
We keep enquiry information only for as long as needed for the purposes set out in this policy.
Unless an enquiry leads to a client relationship, we will normally delete or securely anonymise contact-form enquiries and related correspondence after 12 months from our last meaningful contact with you.
If you become a client, we will retain relevant information in accordance with our consultancy agreement, legal obligations, and our internal retention arrangements. We may retain certain financial and contractual records for longer where required for accounting, tax, insurance or legal purposes.
8. Website cookies
Our website does not use analytics, advertising, tracking or marketing cookies.
We may use strictly necessary technical cookies or similar technologies that are required for the website to operate securely and correctly. These do not track you for marketing or analytics purposes and do not require consent.
If we add non-essential cookies, visitor analytics, marketing tools or embedded third-party content in future, we will update this Privacy Policy and provide appropriate cookie information and consent controls before those technologies are used.
The ICO says organisations must tell visitors about cookies and their purpose, and generally obtain active consent for non-essential cookies.ico.org+1
9. Security
We take appropriate technical and organisational measures to protect personal information from accidental loss, unauthorised access, alteration, disclosure or misuse.
These measures include restricting access to personal information, using secure business systems, protecting accounts with strong passwords and multi-factor authentication where available, and maintaining appropriate device and software security.
No online system can be guaranteed completely secure. Please do not send confidential client, employee or special-category personal information through the website contact form.
10. Your rights
Subject to UK data-protection law, you have rights to:
Ask for access to the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Ask us to delete your information in certain circumstances.
Ask us to restrict how we use your information in certain circumstances.
Object to processing based on legitimate interests.
Ask for a portable copy of information you provided to us, where this applies.
Withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email us at tanya@twpeopleops.co.uk
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator. Details are available on the ICO website.
11. Changes to this policy
We may update this Privacy Policy from time to time, for example if we change our website tools, business processes or legal obligations. The latest version will always be available on this website and will show the date it was last updated.