Privacy Policy Document

Privacy Policy 

Last updated: 17/06/26

AlignedWorks Ltd. (“we”, “us”, “our”) is a UK‑registered limited company specialising in consulting services focused on right‑sized governance for Transformation, Business‑as‑Usual (BAU), and Change delivery. We are committed to protecting the privacy and security of the personal information we process in the course of our business.

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK privacy laws.

1. Who We Are

AlignedWorks Ltd. A limited company registered in England & Wales Company number: 17274696

Registered office: 39 The Metro Centre, Tolpits Lane, Watford, Hertfordshire, England, WD18 9SB

Directors: Two directors 

We act as the Data Controller for the personal data we process.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Client and Business Contact Data

• Name, job title, and organisation
• Business email address and phone number
• Project‑related information
• Communications and meeting notes

2.2 Website and Digital Interaction Data

• IP address
• Browser type and device information
• Cookies and analytics data (if applicable)

2.3 Contractual and Financial Data

• Billing information
• Bank details (for invoicing or payments)
• Contract documentation

2.4 Recruitment or Associate Consultant Data

• CVs, professional profiles, and references
• Right‑to‑work information (if applicable)

We do not intentionally collect special category data unless explicitly required and agreed.

3. How We Use Personal Data

We process personal data for the following purposes:

• Delivering consulting services and fulfilling contractual obligations
• Managing client relationships and communications
• Providing governance, transformation, and change delivery advisory services
• Invoicing, financial management, and record‑keeping
• Improving our services and website
• Meeting legal or regulatory obligations

We only process personal data where we have a lawful basis, such as contract, legitimate interests, consent, or legal obligation.

4. Lawful Bases for Processing

Our primary lawful bases include:

• Contract:
  When processing is necessary to deliver our services.
• Legitimate Interests:
  For business operations such as communication, service improvement, and relationship management.
• Legal Obligation:
  For tax, accounting, and compliance requirements.
• Consent:
  For optional communications or where required by law.

5. How We Store and Protect Personal Data

We take data security seriously and implement appropriate technical and organisational measures, including:

• Secure cloud‑based storage with access controls
• Encryption where appropriate
• Restricted access to authorised personnel only
• Regular review of data retention and security practices

6. Data Sharing and Third Parties

We may share personal data with:

• Professional advisors (e.g., accountants, legal counsel)
• Cloud service providers and IT support partners
• Associate consultants working under contract with us
• Regulatory bodies where legally required

We do not sell personal data to third parties.

All third‑party processors are required to comply with UK GDPR and maintain appropriate security standards.

7. International Transfers

If personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations
• Standard Contractual Clauses (SCCs)
• Equivalent legal protections

8. Data Retention

We retain personal data only for as long as necessary for:

• Contractual and business purposes
• Legal and regulatory compliance
• Accounting and audit requirements

Typical retention periods range from 2 to 7 years, depending on the data type.

9. Your Rights Under UK GDPR

Individuals have the following rights:

• Right to access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with the ICO

To exercise any of these rights, contact us using the details below.

10. Cookies (If Applicable)

If your website uses cookies, include a short statement such as:

We use cookies to improve website functionality and analyse usage. You can manage cookie preferences through your browser settings.

I can expand this into a full cookie policy if needed.

11. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact:

AlignedWorks Ltd.

Email: David.fitt@alignedworksltd.com

Address: 39 The Metro Centre, Tolpits Lane, Watford, Hertfordshire, England, WD18 9SB

If you are not satisfied with our response, you may contact the UK Information Commissioner’s Office (ICO).

12. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website or upon request.