Legal

Privacy Notice

Last updated: October 2026

Ashfurlong Limited ("Ashfurlong", "we", "us") is a company registered in England and Wales with company number 11116224, whose registered office is Thistle House, 12 Market Place, Woodstock, Oxfordshire, OX20 1TA, United Kingdom. We take your privacy very seriously. This Privacy Notice sets out your rights and answers any queries you may have about your personal data. If you need more information, please contact: info@ashfurlong.com

Ashfurlong is the controller of the personal data we collect about you. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection law.

1. What information do we collect?

As a management consulting firm we may collect personal information from you in the course of our business. This includes through your use of our website, when you contact or request information from us, or when you engage our services.

The personal information that we collect may include:

  • contact details such as your name, the company you work for, your job title or position, your postal and email addresses, and phone numbers;
  • technical information such as information from your visits to our website or applications;
  • information you provide to us for the purposes of attending meetings and events, including access and dietary requirements;
  • personal information provided to us by or on behalf of our clients, or generated by us in the course of providing services to them;
  • any other information you provide to us.

2. How do we use this information?

We process the personal data listed in paragraph 1 for the following purposes:

  • to manage and administer our relationship with you and our clients;
  • to provide information you request from Ashfurlong;
  • to provide and improve this website, including monitoring its use;
  • to comply with applicable law and regulation;
  • to protect Ashfurlong's legitimate business interests and legal rights, including in connection with legal claims, compliance, regulatory and investigative purposes (including disclosure of information in connection with legal process or litigation);
  • to respond to and investigate any comments or complaints we receive from you or others about our website, products or services;
  • to promote our services, including sending updates, event details and other relevant communications;
  • to invite you to take part in market research or surveys.

We rely on the following legal bases. Where we have a contract with you, we process your data to perform that contract. Where the law requires it, we process your data to comply with a legal obligation. For the other purposes listed above, we rely on our legitimate interests in running and promoting our business, or on your consent. Where we rely on consent, you can withdraw it at any time.

3. With whom and where will we share your personal data?

We may share your personal data with our group companies for the purposes of inter-group administration. We may also share it with them to deliver services where parts of those services are provided by a group company other than the one you have contracted with.

We may also share your personal data with the following third parties:

  • our professional advisers, such as our accountants, auditors and external legal and financial advisers;
  • marketing and communications agencies, where they have agreed to process your personal data in line with this Privacy Notice;
  • market research companies;
  • our business partners and sub-contractors;
  • search engine and web analytics providers;
  • other third parties who process data on Ashfurlong's behalf for the purposes set out in this Privacy Notice, such as providers of website services and IT infrastructure hosting and maintenance;
  • government authorities and/or law enforcement officials, where required by law or needed to protect our legitimate interests in compliance with applicable law.

If our business or any part of it is reorganised, sold or integrated with another business, we may need to transfer your information to new Ashfurlong entities, to advisers, or to third parties through which the business of Ashfurlong will be carried out.

4. How long will you keep my personal data?

We keep personal data in line with our data retention policy. That policy categorises the information we hold and sets a retention period for each category. Retention periods depend on the purpose for which the information was collected and is used, and take account of:

  • legal or regulatory requirements to keep information for a minimum period;
  • limitation periods for legal action;
  • good practice;
  • Ashfurlong's business purposes.

5. Where is my data stored?

The personal data that we collect from you may be transferred to and stored outside the United Kingdom. It may also be processed by staff operating outside the UK who work for us or for one of our suppliers. Where this happens, we make sure that one of the following applies:

  • the destination country is covered by UK adequacy regulations; or
  • other appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. What are my rights in relation to my personal data?

You have the right to ask us not to process your personal data for marketing purposes. You can exercise this right in any of these ways:

  • by ticking the relevant boxes on the forms we use to collect your data;
  • by clicking the unsubscribe link in any communication we send you;
  • by contacting us.

Where you have consented to us using your personal data, you can withdraw that consent at any time.

If the information we hold about you is inaccurate or incomplete, you can ask us to correct or complete it.

You also have the right, with some exceptions and qualifications, to ask us for a copy of the personal data we hold about you. In some circumstances you can also ask us to transfer your data to another organisation, and you can object to processing based on our legitimate interests.

If you have a complaint about how we have handled your personal data, you may be able to ask us to restrict how we use it while your complaint is resolved. In some circumstances you can ask us to erase your personal data:

  • (a) if you withdraw your consent for us to use it;
  • (b) if it is no longer necessary for us to use it;
  • (c) if you object to our use of it and we have no overriding reason to continue; or
  • (d) if we have not handled it in accordance with our legal obligations.

7. Cookies

Our website uses cookies, which are small text files placed on your device. We use cookies that are strictly necessary for the website to work. These do not require your consent.

With your consent, we may also use analytics cookies to understand how visitors use our website so that we can improve it. We will only set these cookies if you accept them through our cookie banner. You can change your choice at any time, and you can also block or delete cookies through your browser settings. Blocking strictly necessary cookies may affect how the website works.

8. Where can I find more information about Ashfurlong's handling of my data?

If you have any queries about this Privacy Notice or about Ashfurlong's processing of your personal data, or if you wish to exercise your rights, contact us at: info@ashfurlong.com

If you are not happy with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk