Effective Date: 1st September 2025

Last Updated: 1st September 2025

1. Who We Are

Formara Consulting Limited (“we”, “our”, “us”) is committed to protecting your privacy and handling your personal data in a transparent and secure way. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

Contact details:
Formara Consulting Limited
Email: reece@formara.consulting

2. What Information We Collect

We may collect and process the following types of personal data:
- Identity and contact details (e.g., name, email, phone number, address)
- Professional details (e.g., job title, company)
- Study participation data (e.g., video/audio recordings, usability feedback)
- Technical data (e.g., IP address, browser type, cookies)
- Financial details (for invoicing and payments)

3. How We Collect Your Data

- Directly from you (e.g., when you contact us, sign up for services, or participate in studies)
- Automatically via our website (e.g., cookies, analytics)
- From third parties (e.g., recruitment agencies, client referrals)

4. How We Use Your Data

We process personal data for:
- Delivering consultancy services and fulfilling contracts
- Conducting human factors/usability studies
- Managing client relationships and communications
- Meeting legal and regulatory obligations
- Improving our services and website performance

5. Legal Bases for Processing

We rely on:
- Consent (e.g., for participation in usability studies)
- Contract (e.g., to provide services to clients)
- Legal obligation (e.g., regulatory reporting)
- Legitimate interests (e.g., improving services, managing operations)

6. How We Protect Your Data

- Encryption of sensitive data
- Secure storage with restricted access
- Regular security audits and staff training
- Anonymisation or pseudonymisation where possible

7. Data Sharing

We may share your data with:
- Service providers (e.g., IT, recruitment, analytics)
- Regulatory authorities (where legally required)
- Ethics committees or IRBs (for study approval)
We do not sell your personal data.

8. International Transfers

If we transfer data outside the UK, we ensure appropriate safeguards (e.g., Standard Contractual Clauses).

9. Data Retention

We keep personal data only as long as necessary for the purposes collected and to meet legal obligations. Retention periods vary by data type and regulatory requirements.

10. Your Rights

You have the right to:
- Access, correct, or delete your data
- Withdraw consent at any time
- Object to processing or request restriction
- Data portability
- Lodge a complaint with the ICO (www.ico.org.uk)

12. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

13. Contact Us

If you have questions or concerns about this policy, contact us at:
Email: reece@formara.consulting