Information we collect
1.1 Information you provide
We collect information you voluntarily provide when you:
- Complete a contact form or booking form on our Site
- Subscribe to our newsletter
- Engage with us via email, phone, or social media
- Enter into a consulting engagement with us
This may include your name, email address, phone number, company name, job title, and any message content you provide.
1.2 Information collected automatically
When you visit our Site, we may automatically collect:
- IP address and approximate geographic location
- Browser type and version, device type, and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring website or campaign source (including UTM parameters)
- Cookies and similar tracking technologies (see Cookies)
1.3 Information from third-party platforms
If you interact with our advertisements on platforms such as LinkedIn, Meta (Facebook/Instagram), or Google, those platforms may share limited information with us, such as:
- Whether you clicked on an ad or visited our Site as a result
- Aggregated demographic and interest data
- Conversion events (e.g. form submissions originating from an ad)
How we use your information
We use the information we collect for the following purposes:
- To respond to enquiries — processing your contact form submissions and booking requests.
- To deliver our services — managing consulting engagements and communications.
- To improve our Site — analysing usage patterns to enhance user experience.
- To send marketing communications — only where you have given consent or where we have a legitimate interest. You can opt out at any time.
- To run advertising campaigns — using platforms like LinkedIn Ads, Meta Ads, and Google Ads, including retargeting and lookalike audiences.
- To comply with legal obligations — meeting regulatory and legal requirements.
Legal basis for processing (UK GDPR)
We process your personal data under the following lawful bases:
- Consent — where you have given clear consent (e.g. newsletter sign-up, cookie consent).
- Contract — where processing is necessary to fulfil a contract or take pre-contractual steps at your request.
- Legitimate interest — where we have a legitimate business interest that does not override your rights (e.g. direct marketing to existing clients, website analytics, fraud prevention).
- Legal obligation — where processing is required by law.
Advertising & tracking pixels
We use advertising pixels and tracking technologies from the following platforms:
- LinkedIn Insight Tag — to measure ad performance, retarget website visitors, and build matched audiences.
- Meta Pixel (Facebook/Instagram) — to track conversions, optimise ad delivery, and create custom and lookalike audiences.
- Google Ads / Google Analytics — to measure ad performance, understand user behaviour, and improve our marketing.
These technologies may collect data such as your IP address, browser information, pages visited, and actions taken on the Site. This data is shared with the respective platforms and is subject to their own privacy policies:
You can opt out of personalised advertising through your platform settings or by using tools such as Your Online Choices.
Data sharing & disclosure
We do not sell your personal data. We may share your information with:
- Service providers — such as email providers (Resend), hosting platforms, and analytics tools, who process data on our behalf under contract.
- Advertising platforms — LinkedIn, Meta, and Google, for campaign measurement and audience targeting.
- Professional advisers — accountants, lawyers, or auditors where necessary.
- Law enforcement — where required by law or to protect our legal rights.
Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions — retained for up to 24 months unless you become a client.
- Client engagement data — retained for 6 years after the end of the engagement, in line with legal and regulatory requirements.
- Marketing data — retained until you unsubscribe or withdraw consent.
- Analytics data — aggregated and anonymised data may be retained indefinitely.
International data transfers
Some of our service providers (e.g. cloud hosting, analytics tools) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the UK government.
Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure— request deletion of your data (“right to be forgotten”).
- Restriction — request that we limit how we use your data.
- Portability — request your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests or for direct marketing.
- Withdraw consent — where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at hello@evolvex360.co.uk. We will respond within one calendar month.
Data security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/SSL), access controls, and secure data storage. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Children's privacy
Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.
Contact us
If you have any questions about this Privacy Policy or our data practices, please get in touch:
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.