Privacy Policy

Sloan Strategic Advisory Limited is the data controller responsible for your personal data. We are a company registered in England and Wales, company number 17080080, with our registered office at Laburnum Cottage, Penymynydd Road, Penyffordd, Flintshire CH4 0LJ.

We are registered with the Information Commissioner's Office (ICO) under registration reference ZC210707.

For any questions about this policy or how we handle your data, contact Andy Sloan directly at andy@sloanstrategic.com.

We collect personal data directly from you in the following ways.

Contact form: when you submit an enquiry through our contact page, we collect your name, email address, organisation (optional), the nature of your enquiry, and the content of your message.

Newsletter and updates: if you subscribe to receive updates, we collect your email address.

Scheduling a call: if you book time using our calendar link, that booking is handled directly by Google Calendar under Google's own privacy terms. We do not receive any personal data from that booking beyond what you choose to share with us directly.

We do not collect sensitive categories of personal data (such as health, racial or ethnic origin, or political opinions) through this website, and we ask that you do not include such information in any message to us.

We use your personal data for the following purposes, and on the following legal bases under UK GDPR.

To respond to your enquiry, using your name, email, organisation and message. This is necessary for our legitimate interest in responding to enquiries about our advisory and NED services, and in some cases to take steps prior to entering into a contract with you.

To send you updates, articles and insights, using your email address, where you have given your consent by subscribing. You may withdraw this consent at any time.

To maintain our own business records, using enquiry and engagement data, for our legitimate interest in managing our client and contact relationships.

We share personal data with the following third parties, who act as our data processors.

Supabase (database and website hosting), which stores contact form submissions and manages secure access to our website's administrative functions.

Resend (transactional email), which sends the email notification generated when you submit our contact form.

HubSpot (customer relationship management), which stores newsletter subscriber email addresses and manages our contact database. HubSpot processes this data in its EU data centre.

We do not sell, rent or otherwise disclose your personal data to third parties for their own marketing purposes.

Our processors are chosen to store and process data within the UK or European Economic Area wherever possible. Where any processor transfers data outside the UK or EEA, appropriate safeguards are in place, such as the UK's International Data Transfer Addendum or equivalent standard contractual clauses, as required by the processor's own compliance obligations.

We retain contact form submissions and correspondence for as long as reasonably necessary to manage the relevant enquiry or relationship, and thereafter for a limited period to meet our legal, accounting or record-keeping obligations, typically no longer than six years.

Newsletter subscriber data is retained until you unsubscribe or ask us to delete it.

Where data is no longer needed for these purposes, we delete or anonymise it.

This website does not use third-party advertising or tracking cookies. It uses only the technical storage strictly necessary for the site to function, including maintaining a secure session for administrative access. No behavioural profiling or analytics cookies are set for visitors.

If this changes in the future, this policy will be updated and, where required, we will ask for your consent before setting non-essential cookies.

Under UK GDPR, you have the right to:

Access the personal data we hold about you.

Request correction of inaccurate or incomplete data.

Request deletion of your data, in certain circumstances.

Request that we restrict or stop processing your data, in certain circumstances.

Request a copy of your data in a portable format.

Object to processing based on legitimate interest.

Withdraw consent at any time, where processing is based on consent, such as our newsletter.

To exercise any of these rights, contact andy@sloanstrategic.com. We will respond within one month, as required by law.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting, access controls, and encrypted transmission of data submitted through our website. No online system is entirely without risk, and we cannot guarantee absolute security, but we review our safeguards regularly.

This website and our services are directed at businesses and professional individuals. We do not knowingly collect personal data from children, and this website is not intended for use by anyone under the age of 18.

We may update this policy from time to time to reflect changes in our practices or legal requirements. The version date at the top of this page shows when it was last revised.

If you have a concern about how we handle your personal data, please contact us in the first instance at andy@sloanstrategic.com so we can try to resolve it directly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by telephone on 0303 123 1113.

I use AI tools to support my work. That includes research, drafting assistance and editing. It does not include generating positions, opinions or analysis. Every claim published under my name, on this site, in my columns or in my books, reflects my own judgement and experience and has been verified by me before publication. Where a publication or platform requires specific AI disclosure, I comply with its policy.