Last updated: 08th December 2025

Òstair Consultancy (“we”, “our”, “us”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website or engage with our services.

By using our website, you agree to the terms outlined in this policy.

Òstair Consultancy
David Lapsley
Email: david@ostairconsultancy.co.uk
Phone: 07447527833

We are the data controller responsible for how your personal information is used.

We may collect and process the following types of personal data:

• Name
• Email address
• Phone number
• Company name
• Any information submitted through enquiry forms or email correspondence

When you browse our website, we may collect:

• IP address
• Browser type and device information
• Pages viewed and navigation paths
• Cookies and tracking technologies (see Section 8)

We may receive information from:

• Analytics providers (e.g., Google Analytics)
• Social media platforms (if you interact with our content)

We use your information to:

• Respond to enquiries or requests
• Provide consultancy services
• Improve website performance and user experience
• Send relevant updates or communications (with your consent)
• Maintain security and prevent misuse of our website
• Comply with legal obligations

We will only use your personal data where we have a lawful basis, such as:
consent, legitimate interest, contractual necessity, or legal compliance.

We do not sell your personal data.

We may share information with trusted third parties, including:

• Service providers such as website hosting, analytics, or email platforms
• Professional advisers (legal, financial, or compliance)
• Regulators or authorities if required by law

All third parties are required to handle your data securely and lawfully.

If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses
• Adequacy decisions

We retain personal data only as long as necessary for:

• Delivering our services
• Fulfilling the purpose for which it was collected
• Meeting legal or reporting obligations

Enquiry-related data is typically retained for up to 24 months, unless otherwise required.

Under GDPR and UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict processing of your information
• Object to processing based on legitimate interest
• Withdraw consent at any time
• Request data portability

To exercise these rights, contact us at:
david@ostairconsultancy.co.uk

Our website uses cookies to:

• Improve functionality
• Analyse website traffic
• Enhance your browsing experience

You can control or disable cookies through your browser settings.
For detailed information, see our Cookie Policy

We take appropriate technical and organisational measures to protect your data, including:

• Encrypted communications (SSL)
• Restricted system access
• Secure data storage

However, no online transmission is 100% secure, so we cannot guarantee absolute protection.

Our website may contain links to external sites.
We are not responsible for their privacy practices or content.

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

Òstair Consultancy
Email: david@ostairconsultancy.co.uk