Last updated: 1 November 2026
This notice explains how Millit Consultants Limited (“Millit Consultants”, “I”, “me”, “we”) collects and uses personal information when you visit this website, contact me, or work with me. I take your privacy seriously and only collect what I need.
Who I am
Millit Consultants Limited is the controller of the personal information described in this notice. As a small consultancy, I do not need to appoint a Data Protection Officer; please contact me directly with any questions.
- Company name
- Millit Consultants Limited
- Company number
- 08046169
- Registered in
- England and Wales
- Registered office
- Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, England, BL6 6HG
- phil@millit.co.uk
- VAT number
- GB134051945
- ICO registration number
- ZA903278
Information I collect
When you get in touch
If you use the contact form or email me, I receive your name, email address and message, and optionally your phone number and organisation. Contact-form messages are sent to me by email; they are not stored on this website. Please do not include sensitive information (such as health details) in your message.
When we work together
If you are a client, prospective client, supplier, agency or other business contact, I hold business contact details (name, job title, organisation, work email and phone) and records of our correspondence, proposals, contracts and invoices.
When you visit this website
- This site does not use analytics, advertising or tracking cookies, and does not load content from third parties such as Google Fonts, social-media widgets or reCAPTCHA.
- Like almost all websites, my hosting provider automatically records technical information in server logs (such as IP address, browser type, pages requested and the date and time) to keep the site secure and working.
- To prevent abuse of the contact form, a one-way scrambled (hashed) version of your IP address is kept for one hour.
How and why I use your information
UK data protection law requires me to have a “lawful basis” for each use of your personal information.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Responding to your enquiry and discussing potential work | Contact details and message | Legitimate interests (responding to people who contact me) and, where relevant, taking steps at your request before entering a contract |
| Providing services, managing contracts and invoicing | Business contact details, correspondence, contract and payment records | Performance of a contract; legitimate interests where the contract is with your employer |
| Keeping accounting and tax records | Invoices, contracts and payment records | Legal obligation (Companies Act 2006, HMRC requirements) |
| Keeping in touch with business contacts about relevant work | Business contact details | Legitimate interests – you can ask me to stop at any time |
| Keeping this website secure and preventing spam | Server logs, hashed IP address | Legitimate interests (security of the website) |
| Establishing or defending legal claims and dealing with insurers | Relevant records | Legitimate interests; legal obligation |
I do not sell your information, use it for automated decision-making or profiling, or add you to marketing mailing lists.
Where I rely on legitimate interests, I have considered whether those interests are overridden by your rights and concluded they are not. You can ask me for more detail.
Work carried out for clients
During client engagements I may have access to personal information held by the client (for example, staff or customer data in project systems). In those cases the client is the controller and I act on its instructions as a processor; the client’s own privacy notice applies.
Who I share information with
I only share personal information where necessary, with:
- service providers who support the business, such as my website host ([hosting provider]), email provider ([e.g. Microsoft 365 / Google Workspace]), accountant and IT providers – all bound to protect your information;
- recruitment agencies or intermediaries through which an engagement is arranged, where relevant;
- professional advisers and insurers;
- HMRC, Companies House, regulators, courts or law enforcement where the law requires it.
International transfers
Some of my service providers may store or process information outside the UK. Where that happens, I make sure appropriate safeguards are in place, such as UK “adequacy regulations” for the destination country or the ICO-approved International Data Transfer Agreement / Addendum.
How long I keep information
| Information | Retention period |
|---|---|
| Enquiries that don’t lead to work | Up to 12 months after our last contact |
| Client, contract and financial records | 6 years from the end of the financial year they relate to (longer if needed for a legal claim) |
| Business contact details | While we have an active working relationship, then reviewed at least every 2 years |
| Hashed IP address (contact-form spam protection) | 1 hour |
| Website server logs | As set by my hosting provider – typically no more than [30 / 90] days |
How I protect your information
I use appropriate technical and organisational measures, including encrypted connections (HTTPS) for this website, multi-factor authentication on business accounts, encrypted devices and limiting access to information to what is needed.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- access the personal information I hold about you;
- have inaccurate information corrected;
- have information erased;
- restrict how your information is used;
- object to how your information is used, including where I rely on legitimate interests;
- receive your information in a portable format, in certain circumstances;
- withdraw consent at any time, where I rely on consent.
These rights are not absolute and some only apply in certain circumstances. To make a request, email phil@millit.co.uk. There is normally no charge, and I will respond within one month.
Complaints
If you are unhappy with how I have handled your information, please contact me first at phil@millit.co.uk so I can try to put things right. I will acknowledge your complaint and keep you informed of progress.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Cookies
Please see the cookie policy.
Changes to this notice
I may update this notice from time to time. The latest version will always be on this page, with the date it was last updated.