Privacy Policy
Data controller
The data controller is the company trading as ICOS. Full legal entity details are disclosed to clients during engagement onboarding. For data requests, contact info@icos.consulting.
What we collect
Form submissions (name, email, company, enquiry details); analytics data via GA4 (measurement ID G-8912EFWTTV); essential cookies. We do not sell data and do not use third-party advertising trackers.
Lawful basis
Legitimate interest for responding to enquiries. Explicit consent for marketing communications. You may withdraw consent at any time.
Data retention
Enquiry records: 24 months from last contact. Client records: 7 years from engagement close, as required by professional conduct standards. Analytics: 14 months.
Third-party processors
Tally (form submissions, EU hosting), Ghost (blog platform), Google Analytics 4 (anonymised), Fastmail (email). Each has its own privacy policy and DPA.
Your rights under GDPR
Access, rectification, erasure, portability, and the right to object to processing. We'll respond to requests within 30 days. Contact info@icos.consulting with 'Data Request' in the subject line.
Contact for data requests
info@icos.consulting — marked 'Data Request'. We typically respond within 5 business days.