Privacy Policy

This privacy policy explains how White Rock Advisory Ltd collects, uses and protects personal information when you use this website, contact us, or engage with our services.

White Rock Advisory Ltd is registered in England and Wales. Company Registration Number: 17163381.

Who We Are

White Rock Advisory Ltd provides practical cyber resilience guidance, awareness sessions, speaking engagements and business resilience support.

For privacy-related enquiries, you can contact us here.

Information We May Collect

We may collect personal information when you contact us, enquire about services or communicate with us.

This may include:

• Your name
• Your email address
• Your telephone number, if provided
• Your organisation name
• Information included in messages, enquiries or correspondence
• Basic website technical information such as IP address, browser type, device information and pages visited

How We Use Your Information

We use personal information to:

• Respond to enquiries
• Provide information about our services
• Arrange calls, meetings, speaking engagements or professional services
• Manage client and supplier relationships
• Maintain website security and performance
• Understand how visitors use the website, where consent has been provided
• Meet legal, regulatory, accounting or administrative obligations

Lawful Basis for Processing

We process personal information where it is necessary for legitimate business interests, to respond to enquiries, to take steps before entering into a contract, to perform a contract, or to comply with legal obligations.

Where we rely on consent, including for non-essential analytics cookies, you may withdraw your consent at any time.

Website Services

We use reputable third-party providers to host and secure this website. These providers may process limited technical information required for website operation, performance and security.

This may include server logs, IP addresses, browser information and security-related data.

Cookies and Similar Technologies

We use essential cookies or similar technologies required for website security, performance and operation. Cloudflare may also use cookies or similar technologies for security, traffic management and protection against malicious activity.

With your permission, we use Google Analytics 4 to understand how visitors use the website and to help improve its content and performance. Google Analytics may collect information including pages visited, session activity, approximate location, browser information and device information. It uses cookies such as _ga to distinguish visitors and sessions.

Analytics cookies are non-essential and are only activated after you provide consent. You may accept or reject analytics cookies and may withdraw or change your choice at any time. Rejecting analytics cookies will not affect your ability to use the website.

Google processes analytics information on our behalf. Further information is available in Google's Privacy Policy .

Sharing Information

We do not sell personal information. Information will only be shared where necessary to provide our services, comply with legal obligations or protect legitimate business interests.

We use trusted third-party providers to host, secure and maintain this website. These providers may process limited technical information necessary for the operation, security and performance of the website.

International Transfers

Some service providers, including Google, may process information outside the United Kingdom. Where this occurs, appropriate safeguards are expected to be used in accordance with applicable data protection laws.

How Long We Keep Information

We only keep personal information for as long as necessary for the purpose it was collected, including to respond to enquiries, provide services, maintain business records, meet legal obligations or resolve disputes.

General enquiry information will normally be kept only for as long as needed to respond and manage the enquiry, unless a business relationship develops or we are required to keep it for legal, accounting or administrative reasons.

Your Rights

Under UK data protection law, you may have rights including the right to:

• Access the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information
• Ask us to restrict how we use your information
• Object to certain uses of your information
• Withdraw consent where processing is based on consent
• Request a copy of your information in a portable format, where applicable

The right to object applies where we rely on legitimate interests as our lawful basis. You can contact us at any time if you wish to exercise your rights.

Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction. However, no website or email communication can be guaranteed to be completely secure.

Links to Other Websites

This website may contain links to external websites. We are not responsible for the privacy practices, security or content of third-party websites.

Complaints

If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be published on this page.

Contact

For questions about this privacy policy or how your personal information is handled, please contact us here.