Privacy Policy

Who I am

This website (natportman.co.uk) is operated by Nat Portman, an independent operations and growth consultant based in the United Kingdom ("I", "me", "my"). I am the data controller responsible for your personal data.

Contact: nat@natportman.co.uk

What data I collect

I only collect the personal data you choose to give me, which may include:

• Your name, email address and any details you provide when you complete the Scale Scorecard, use the contact form, or otherwise get in touch.
• Information about your business that you share in the course of an enquiry or engagement.
• Basic technical and usage data collected automatically by website analytics (see my Cookie Policy).

How and why I use it (lawful basis)

I use your data to:

• Respond to your enquiry and arrange or carry out consultancy work. Lawful basis: to take steps at your request before entering a contract, and/or the performance of a contract.
• Send you information you have asked for. Lawful basis: your consent, or my legitimate interest in responding to enquiries.
• Understand how my website is used so I can improve it. Lawful basis: your consent (via the cookie banner).

I do not sell your data, and I do not use it for automated decision-making.

Who I share it with

I use a small number of trusted service providers who process data on my behalf:

• GoDaddy - domain and email hosting.
• Lovable - website hosting and deployment.
• Supabase - secure storage of contact and Scorecard submissions.
• Google Analytics 4 - anonymous website usage statistics, only with your consent.
• Cloudflare Turnstile - spam and bot protection on the forms.
• Google Search Console - search performance data.

Each processes data only as needed to provide their service. I do not otherwise share your data unless required by law.

How long I keep it

I keep enquiry and client data only as long as needed for the purpose it was collected and to meet legal or tax obligations, after which it is securely deleted. That means up to 6 years for financial records; enquiry data is deleted within 24 months if no engagement follows.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or object to my use of your personal data, and the right to data portability. To exercise any of these, email nat@natportman.co.uk.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.

International transfers & security

Some of these providers process data outside the UK. Where that happens, transfers are covered by the UK's approved safeguards, such as the International Data Transfer Agreement or an adequacy decision.

I take reasonable technical and organisational measures to keep your data secure.

Changes

I may update this policy from time to time; the "last updated" date above shows the latest version.