Policy
Privacy Notice
Published: 04/08/2026
Last Review: 11/08/2026
1. Who we are and how to contact us
Copernicus International Consulting Ltd, registered office 1 Worsley Court, High Street, Worsley, Manchester M28 3NJ, company number 06941196.
For privacy enquiries: enquiries@copernicus-consulting.com
We are the data controller for personal data collected through this website.
2. Scope of this notice
This notice covers personal data collected via www.copernicus-consulting.com and any of its sub-domains.
It does not cover personal data collected by third-party platforms we link to (e.g. LinkedIn, YouTube). Their privacy notices apply on their own sites.
3. The personal data we collect and why
We collect personal data for the following purposes. For each purpose, we describe the data collected, the lawful basis we rely on, and why we need it.
Enquiry form submissions
Data collected: name, business email, company, role, country, phone, service interest, target markets, brief description of the enquiry.
Lawful basis: legitimate interests (responding to a business enquiry) and pre-contractual steps.
Why we need it: we process this data so we can respond, scope a possible engagement, and follow up if invited to do so.
Lead-magnet downloads
Data collected: name, business email, company, country.
Lawful basis: legitimate interests (providing the requested resource and capturing market interest signal).
Why we need it: we send the file once and a single confirmation email. We do not run drip campaigns.
Website analytics
Data collected: IP address (anonymised), pages viewed, browser/device category, referrer.
Lawful basis: consent (you can decline analytics cookies via our consent banner).
Why we need it: we use this data to understand which content is useful, fix problems and improve the site.
Engagement-related correspondence
Once an enquiry becomes an active engagement, we hold contact details, scope-of-work documents and engagement correspondence.
Lawful basis: contract (performance of our agreement with you) and legitimate interests (running our business).
Server logs
Data collected: IP address, request timestamps, error reports.
Lawful basis: legitimate interests (security, fraud prevention, technical operation). Retained for the period stated below.
4. Special-category and children’s data
We do not knowingly collect special-category personal data through this website. If you submit it through an enquiry, we will hold it only as long as necessary to respond and will delete it on request.
Our services are aimed at businesses. We do not knowingly collect personal data from children under 16.
5. How long we keep personal data
The table below sets out our standard retention periods.
Purpose | Retention period |
Enquiry data (no engagement followed) | 24 months from last contact, then deleted |
Lead-magnet contact data (no engagement followed) | 24 months from download, then deleted |
Engagement correspondence | 7 years from end of engagement (UK accounting and tax record-keeping requirements) |
Server logs | 90 days, then deleted |
Analytics data (cookie-based) | Up to 14 months (GA4 default; can be shortened on request) |
6. Who we share personal data with
Within Copernicus: the UK core team and, where directly relevant to your enquiry or engagement, the assigned Copernicus consultant(s) in the relevant market. All sharing within Copernicus is subject to contractual confidentiality obligations.
External processors: our website host, email service, analytics provider, and (when an engagement is active) any specifically named processors disclosed in the engagement letter. A current list of processors is available on request.
Authorities: where required by law, court order or to protect Copernicus’s lawful interests.
We do not sell personal data, and we do not use it for advertising profiling.
7. International transfers
Some of our processors operate outside the UK and the EEA. Where they do, we rely on UK adequacy decisions, EU adequacy decisions, or Standard Contractual Clauses with appropriate technical and organisational measures.
For visitors outside the UK and EEA, your data is processed lawfully under applicable local law in addition to the UK and EU regimes referenced above.
8. Your rights
Under UK GDPR and EU GDPR you have rights of: access (to obtain a copy of your personal data); rectification (to correct inaccurate data); erasure (‘the right to be forgotten’ in certain circumstances); restriction of processing; objection to processing (including direct marketing and processing based on legitimate interests); portability (to receive your data in a structured, machine-readable format); and to withdraw consent (where consent is the basis for processing).
To exercise any of these rights, contact enquiries@copernicus-consulting.com. We will respond within one calendar month. We may need to verify your identity before processing a request.
If you are not satisfied with our response, you may complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or to your local EU/EEA supervisory authority.
For visitors outside the UK and EEA, equivalent rights may apply under your local law and we will respect those rights to the extent they apply.
9. Security
The site uses HTTPS throughout. Access to personal data is restricted to authorised UK core team members and the assigned Copernicus consultant responsible for your enquiry or engagement. We maintain reasonable technical and organisational measures appropriate to the risk, including access controls, encrypted transmission, and regular review of our security practices.
We do not store payment card details on this website.
10. Changes to this notice
We review this notice periodically and may update it to reflect changes in our data practices, legal requirements, or the technology we use. Material changes are notified via the version line at the top of this page. For active engagements, we will also notify by direct email where a change is material to the engagement.
11. Contact
For any privacy question or to exercise your rights, write to us at enquiries@copernicus-consulting.com. We aim to respond to all privacy enquiries within five working days.