Privacy Policy

We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and what your rights are.

1Who we are

Ideate Partners Ltd is the data controller for personal data collected through this website and in the course of our business activities.

2Data we collect

Depending on how you interact with us, we may collect the following types of personal data:

• Identity data: your name and job title
• Contact data: email address, phone number, and postal address
• Business data: company name and details about your business
• Communications data: messages, emails, and notes from conversations with us
• Transaction data: details of services purchased, invoices, and payment records
• Course data: booking information, attendance, and course completion records
• Marketing preferences: your choices about receiving communications from us
• Technical data: IP address, browser type, and website usage data (via cookies — see our Cookie Policy)

We do not collect or process special categories of personal data (such as health information, ethnic origin, or political views) in the ordinary course of our business.

3How we collect it

We collect personal data through:

• Direct contact: when you fill in a form on our website, email us, call us, or engage us for work
• Course bookings: when you register interest in or book a place on one of our programmes
• Our website: through cookies and analytics tools (see our Cookie Policy)
• Third parties: from referrals, business directories, or social media platforms such as LinkedIn

4How we use it

We use personal data for the following purposes:

• To respond to enquiries and provide the services you’ve requested
• To manage client projects, communications, and billing
• To process course bookings and deliver learning programmes
• To send you marketing communications about our services and courses where you’ve given permission or we have a legitimate interest in doing so
• To improve our website and understand how visitors use it
• To comply with our legal and regulatory obligations

5Legal basis for processing

We process your personal data on the following legal grounds under UK GDPR:

• Contract: where processing is necessary to perform a contract with you or take steps before entering into one
• Legitimate interests: where we have a legitimate business interest that is not overridden by your rights — for example, maintaining client records, following up on enquiries, and sending relevant marketing to business contacts
• Consent: where you have given us specific permission — for example, subscribing to course updates or marketing emails
• Legal obligation: where we are required to process your data to comply with a legal requirement

6Who we share it with

We do not sell your personal data. We may share it with:

• Service providers: trusted third-party suppliers who help us operate our business — including email and CRM platforms (such as HubSpot), website hosting, payment processors, and accounting software. These suppliers process data on our behalf and are bound by data processing agreements.
• Professional advisers: accountants, lawyers, or insurers where necessary
• Regulatory authorities: where required by law (for example, HMRC)

All third parties are required to maintain appropriate security and to process your data only as instructed.

7How long we keep it

We retain personal data for as long as necessary for the purposes it was collected, or as required by law. Our general retention periods are:

• Client and project records: 7 years after the end of the engagement (for legal and tax purposes)
• Enquiries that did not proceed: 2 years from last contact
• Course records: 3 years from the date of attendance
• Marketing contact data: until you unsubscribe or request deletion, or 3 years from last engagement — whichever is sooner
• Website usage data: as set out in our Cookie Policy

When data is no longer needed, we delete or anonymise it securely.

8International transfers

Some of our service providers (such as cloud platforms and CRM tools) may process data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place — such as the UK International Data Transfer Agreement or adequacy decisions — to protect your data in accordance with UK GDPR.

9Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Access: to request a copy of the data we hold about you
• Rectification: to ask us to correct inaccurate or incomplete data
• Erasure: to ask us to delete your data (the “right to be forgotten”) in certain circumstances
• Restriction: to ask us to limit how we use your data
• Portability: to receive your data in a structured, machine-readable format where applicable
• Objection: to object to us processing your data on the basis of legitimate interests
• Withdraw consent: where processing is based on consent, to withdraw that consent at any time

To exercise any of these rights, please contact us at hello@ideate.partners. We will respond within one month. We may need to verify your identity before acting on your request.

10Marketing communications

We may send you marketing emails about our services, courses, and industry updates where you have given consent or where we have a legitimate interest in doing so as a business contact.

You can unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting us at hello@ideate.partners. We will action your request promptly.

11Cookies

Our website uses cookies. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

12Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available at ideate.partners/privacy. We will notify you of significant changes where we have your contact details.

13Contact & complaints

For any questions about this policy or to exercise your data rights, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):