Privacy Notice
Last updated: 18 August 2026
1. About This Privacy Notice
This Privacy Notice explains how BSB Advisory Ltd, trading as BSB Consulting (“BSB Consulting”, “BSB”, “we”, “us” or “our”) collects, uses, stores and protects personal information.
BSB Advisory Ltd is registered in England and Wales under company number 17060081.
For the purposes of UK data protection law, BSB Advisory Ltd is the controller of personal information where it determines the purposes and means for which that information is processed.
This Privacy Notice applies to personal information collected through this website, enquiries, individual advisory services, organisational consulting engagements and other interactions with BSB Consulting.
2. Information We May Collect
Depending on how you interact with BSB Consulting, we may collect and process:
Identity Information - Such as your name.
Contact Information - Such as your email address, telephone number or other contact details you choose to provide.
Enquiry Information - Information you provide when contacting BSB Consulting about your circumstances, requirements, project or the support you are seeking.
Client Information - Information required to provide, manage and document an advisory or consulting engagement.
Organisational Information - Information provided by or obtained in connection with an organisational consulting engagement.
Correspondence - Communications between you and BSB Consulting, including emails and other relevant communications.
Transaction and Financial Information - Information relating to payments, invoices and services purchased, where applicable.
Website and Technical Information - Information relating to your use of the website, which may include device, browser, activity, analytics and cookie-related information depending on your settings and cookie preferences.
We seek to collect only information that is reasonably necessary for the relevant purpose.
3. Information You Provide Through the Enquiry Form
When you submit an enquiry through this website, the information you enter into the form is processed through Squarespace.
BSB Consulting may receive an email notification when an enquiry is submitted and may access the submitted information through the Squarespace platform.
The enquiry form asks users to provide a concise overview of their situation or project and specifically asks users not to include sensitive medical information or confidential third-party information.
Please do not provide information about another identifiable person unless you are authorised to do so and it is appropriate and necessary for the relevant purpose.
Submitting an enquiry does not, by itself, create a client relationship or require BSB Consulting to accept an engagement.
4. How We Use Personal Information
We may use personal information to:
Respond To Enquiries - Including assessing the nature of an enquiry and communicating with prospective clients.
Provide Services - Including individual advisory, organisational consulting and educational services.
Manage Client Relationships - Including arranging engagements, maintaining appropriate records and communicating with clients.
Deliver Organisational Work - Including conducting analysis, developing recommendations, producing agreed outputs and supporting service-improvement work.
Administer Payments and Records - Including invoicing, accounting and maintaining appropriate business records.
Operate and Improve the Website - Including understanding how visitors interact with the website where analytics or similar functionality is used.
Maintain Security and Business Operations - Including protecting the website, systems, records and legitimate business interests.
Meet Legal and Regulatory Requirements - Where processing is necessary to comply with applicable law or establish, exercise or defend legal rights.
We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless there is an appropriate lawful basis for doing so.
5. Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract - Where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.
Legitimate Interests - Where processing is reasonably necessary for the operation, administration, development or protection of BSB Consulting or for providing and improving our services, provided those interests are not overridden by your rights and interests.
Legal Obligation - Where processing is necessary to comply with a legal requirement.
Consent - Where you have given consent for a particular form of processing, including where consent is required for certain non-essential cookies or similar technologies.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Organisational Consulting
When BSB Consulting provides services to an organisation, the respective data protection roles of BSB Consulting and the client organisation will depend on the nature of the engagement and how personal information is being used.
In some circumstances, the client organisation may determine why and how personal information is processed and BSB Consulting may process that information on its behalf. In other circumstances, BSB Consulting may determine the purposes and means of particular processing and act as a controller.
Where necessary, appropriate contractual or data-processing provisions will be agreed for the relevant engagement.
BSB Consulting seeks to use anonymised, aggregated or non-identifiable information for organisational analysis and service-improvement work wherever reasonably practicable.
7. Special Category and Sensitive Information
BSB Consulting does not generally require sensitive medical information through the website enquiry form, and users are expressly asked not to provide it.
Please do not submit detailed health information, medical records or other special category personal data through the website unless BSB Consulting has specifically requested the information and an appropriate basis for processing it has been established.
Where special category personal data is genuinely necessary for a particular engagement, BSB Consulting will consider the appropriate lawful basis and additional condition required under applicable data protection law before processing it.
8. Sharing Personal Information
We do not sell personal information.
Personal information may be shared with third parties where reasonably necessary to operate the business, provide services or comply with legal obligations.
These may include:
Website and Technology Providers - Including Squarespace, which provides the website platform and associated functionality.
Professional Advisers - Such as accountants, legal advisers, insurers or other professional advisers where reasonably necessary.
Service Providers - Where a third-party service is reasonably required for business administration or delivery of an agreed service.
Public Authorities or Regulatory Bodies - Where disclosure is required or permitted by law.
Where appropriate, we seek to ensure that third parties handling personal information do so subject to appropriate data protection and confidentiality requirements.
9. Squarespace, Website Analytics and Cookies
This website is hosted and operated using Squarespace.
Squarespace may process certain information in connection with operating the website, hosting content, processing website form submissions, maintaining security and providing website analytics or related functionality.
BSB Consulting currently uses Squarespace's website analytics functionality, including activity log data.
This website uses essential cookies and may use non-essential cookies or similar technologies for analytics and other website functionality. Where required, non-essential cookies are restricted unless the visitor provides consent through the website's cookie controls.
Visitors are provided with options to:
Accept All – Allowing the use of non-essential cookies in addition to essential cookies.
Decline All – Declining non-essential cookies.
Manage Cookies – Allowing visitors to choose their cookie preferences.
Visitors can subsequently access the website's Cookie Preferences controls to review or change their choices.
Essential cookies may still operate where they are necessary for the website to function, maintain security or provide functionality requested by the visitor.
10. International Data Transfers
Some service providers used by BSB Consulting may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we seek to rely on appropriate safeguards or other lawful transfer mechanisms as required under applicable UK data protection law.
The privacy practices and international data-transfer arrangements of third-party providers may also be governed by their own privacy documentation and contractual arrangements.
11. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax or business requirements.
As a general approach:
Enquiries That Do Not Result in an Engagement – Will normally be retained for up to 12 months after the last meaningful communication and may then be deleted unless there is a reasonable reason to retain them for longer.
Client and Project Records – Will normally be retained for up to 6 years following completion of the relevant engagement or the end of the client relationship, where appropriate for contractual, business or record-keeping purposes.
Financial and Accounting Records – Will be retained for the period required by applicable law.
Website and Analytics Information – Will be retained in accordance with the relevant website, analytics and cookie settings and the retention arrangements of the relevant service provider.
Information that is no longer reasonably required will be deleted, anonymised or securely disposed of where appropriate.
These periods may be extended where necessary in connection with an ongoing dispute, legal requirement or other legitimate reason.
12. How We Protect Personal Information
BSB Consulting takes reasonable organisational and technical measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
These measures include seeking to limit the collection of personal information to what is reasonably necessary, restricting access to information where appropriate and using established technology providers for website and business functionality.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
13. Your Data Protection Rights
Depending on the circumstances and applicable law, you may have rights including:
Right of Access – To request information about the personal data we hold about you and obtain a copy.
Right to Rectification – To request correction of inaccurate or incomplete personal information.
Right to Erasure – To request deletion of personal information in certain circumstances.
Right to Restrict Processing – To request restriction of the way personal information is processed in certain circumstances.
Right to Object – To object to certain processing based on legitimate interests.
Right to Data Portability – To receive certain personal information in a structured, commonly used and machine-readable format where the legal requirements for this right are met.
Right to Withdraw Consent – Where processing relies on consent, to withdraw that consent at any time.
Rights Relating to Automated Decision-Making – Where applicable under data protection law.
These rights are not absolute and may depend on the circumstances and the lawful basis on which information is being processed.
To exercise a relevant right, please contact BSB Consulting using the details below. We may need to verify your identity before responding to a request.
14. Complaints
If you have concerns about how BSB Consulting handles your personal information, please contact us first so that we have an opportunity to address your concern.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
15. Changes to This Privacy Notice
This Privacy Notice may be updated from time to time to reflect changes to BSB Consulting's services, website functionality, technology providers, business practices or applicable legal requirements.
The latest version will be published on this website and the “Last updated” date will be amended accordingly.
16. Contact
For questions about this Privacy Notice, the use of your personal information or your data protection rights, please contact:
BSB Advisory Ltd
Trading as BSB Consulting
Email: balrajbahra87@hotmail.co.uk
Website: www.bsb-consulting.co.uk
Company No. 17060081
Registered in England and Wales.