Privacy Policy
Last updated: 26 May 2026
Draft notice: this is a placeholder privacy policy template for review. It should be reviewed by legal counsel before publication and tailored to the actual data practices of Alper Zan Consultancy.
1. Who we are
Alper Zan Consultancy ("we", "us", "our") is the data controller for personal data submitted through https://alperzanconsultancy.co.uk. You can contact us at team@alperzanconsultancy.co.uk.
2. What we collect
- Information you submit via our enquiry form — name, email, phone, company, message and consent timestamp.
- Technical data automatically collected by our server when you visit (IP address, browser type, pages viewed) for security and performance.
- We do not use third-party analytics, advertising trackers or social pixels.
3. Why we collect it
- To respond to your enquiry and provide the services you've asked about.
- To protect our site from abuse (rate limiting, spam prevention).
- To comply with our legal obligations under UK GDPR and the Data Protection Act 2018.
4. How long we keep it
Enquiry data is retained for as long as needed to fulfil the engagement plus 24 months for record-keeping, after which it is deleted. Server logs are retained for 90 days.
5. Who we share it with
We do not sell, rent or share your personal data with third parties for marketing purposes. Limited sharing occurs only with our hosting provider (Hostinger) and email infrastructure for the purpose of delivering the service.
6. Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any of these rights, email us at team@alperzanconsultancy.co.uk.
You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.
7. Cookies
This site currently uses no cookies beyond strictly-necessary session and security cookies. If we add analytics or other cookie-using services in future, this policy will be updated and a cookie banner will be presented.
8. Security
Personal data is transmitted over HTTPS and stored on UK/EU-hosted infrastructure with access controls, regular backups and standard server hardening. Where forms are submitted, we use CSRF protection, anti-spam measures and rate limiting.
9. Changes
We may update this policy from time to time. Material changes will be announced on this page with a revised "last updated" date.