Privacy policy.

Effective Date: 1st August 2025
Last Updated: 25th August 2025

This Privacy Policy explains how L8six Small Business Consultancy (“L8six”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use our website, consultancy services, digital downloads, online courses, or subscriptions.

We are committed to safeguarding your privacy and complying with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

L8six Small Business Consultancy is a UK-based consultancy helping small businesses with strategy, finance, operations, people, and sales & marketing.

Data Controller: L8six Small Business Consultancy
Email: lucy@l8six.com

2. Information We Collect

We may collect and process the following personal data:

  • Identity Data: name, business name, job title.

  • Contact Data: email address, phone number, billing address.

  • Financial Data: payment details (processed securely via third-party providers; we do not store full card details).

  • Transaction Data: records of purchases, subscriptions, or consultancy sessions.

  • Technical Data: IP address, browser type, device information, cookies.

  • Marketing & Communication Data: your preferences in receiving updates, newsletters, or promotional offers.

3. How We Use Your Data

We use your personal data to:

  • Provide consultancy services, courses, downloads, or subscriptions you have purchased.

  • Process payments and maintain billing records.

  • Communicate with you about your account, purchases, or services.

  • Improve our website, services, and customer experience.

  • Send relevant updates, resources, or marketing (where consent has been given).

  • Comply with legal and regulatory obligations.

4. Legal Basis for Processing

We process personal data under the following legal grounds:

  • Contractual necessity: to deliver services or products you have purchased.

  • Legitimate interests: to improve services, protect our business, and prevent fraud.

  • Legal obligation: to comply with UK tax, accounting, or regulatory requirements.

  • Consent: for optional marketing communications (you can withdraw consent at any time).

5. Sharing Your Data

We do not sell or rent your data. We may share personal data with:

  • Service providers (e.g., payment processors, email platforms, IT hosting).

  • Professional advisers (e.g., accountants, legal advisers).

  • Authorities where required by law.

All third-party providers are required to process data in line with UK GDPR.

6. International Transfers

Where third-party providers are based outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your personal data.

7. Data Retention

  • We keep personal data only as long as necessary to fulfil the purposes outlined in this policy.

  • Business and financial records are retained for at least 6 years to comply with HMRC requirements.

  • Marketing data will be kept until you opt out or withdraw consent.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.

  • Request correction of inaccurate data.

  • Request erasure of your data (subject to legal retention requirements).

  • Restrict or object to certain types of processing.

  • Data portability (transfer your data to another provider).

  • Withdraw consent for marketing communications at any time.

To exercise your rights, contact us at lucy@l8six.com.

9. Cookies

Our website uses cookies to improve functionality and analyse site usage. You can control or disable cookies through your browser settings.

10. Data Security

We implement technical and organisational measures to protect personal data, including:

  • Secure servers and encrypted connections (SSL).

  • Limited access to personal data by authorised staff only.

  • Secure third-party payment processing.

11. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with a new “Last Updated” date.

13. Contact Us

For any questions about this Privacy Policy, please contact:

L8six Small Business Consultancy
Email: lucy@l8six.com