This notice explains how S&S Project Advisory Limited collects, uses and protects personal information when you visit this website, contact us, or work with us.
Who we are
S&S Project Advisory Limited is the controller of the personal information described in this notice. We are a company registered in England & Wales (company number 16825419), with our registered office at 5 Springs Close, Ellesborough, Aylesbury, England, HP17 0XE.
For any privacy question or request, email hello@ssprojectadvisory.co.uk or write to our registered office.
What we collect
- Enquiries. When you use our contact form or email us: your name, email address, company, sector and anything you include in your message.
- Client and engagement contacts. Business contact details of people we work with at clients, contractors and consultants, and any personal information contained in project documents we review under contract.
- Website use. Our hosting and font providers receive standard technical information such as your IP address and browser type when pages load. We do not use analytics, advertising or tracking cookies on this website.
How and why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to your enquiry and discussing a possible engagement | Legitimate interests — replying to people who contact us |
| Delivering services we've been engaged to provide | Contract, or legitimate interests where the contract is with your employer |
| Keeping business, tax and accounting records | Legal obligation |
| Keeping the website secure and working | Legitimate interests |
We will not add you to a mailing list or send you marketing without your agreement, and you can opt out at any time. We do not sell personal information, and we do not use client documents or enquiry content to train AI models.
Who we share it with
We use a small number of trusted service providers who process information on our behalf:
- Formspree — receives contact form submissions and forwards them to us by email.
- Microsoft 365 — business email and document storage.
- Cloudflare — website hosting, domain and security services.
- Google Fonts and Fontshare — deliver the typefaces used on this site.
We may also share information with professional advisers (such as accountants, insurers or lawyers), or where the law requires it. Within an engagement, we share information only as agreed with our client and subject to confidentiality obligations.
International transfers
Some of our providers, including Formspree, process information in the United States. Where personal information leaves the UK, we rely on recognised safeguards such as UK adequacy regulations (including the UK–US data bridge), or the International Data Transfer Addendum to standard contractual clauses.
How long we keep it
- Enquiries that don't lead to an engagement: deleted within 12 months of our last contact.
- Engagement records and correspondence: kept for up to 6 years after the engagement ends, to meet contractual, insurance and legal requirements.
- Financial records: kept for 6 years after the end of the financial year they relate to.
Your rights
Under UK data protection law you have the right to request access to your personal information, and to ask us to correct, delete or restrict it. You can also object to how we use it, or ask for a copy in a portable format. To make a request, email hello@ssprojectadvisory.co.uk. We will respond within one month.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Keeping information secure
We use access controls, multi-factor authentication and encrypted services to protect the information we hold, and we limit access to people who need it.
Changes to this notice
We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated.