Privacy notice
Version 1.2 ยท last updated 25 September 2026
This notice explains how That Data Person Limited handles personal data about clients, suppliers, business contacts and visitors to this website.
1. Who we are
That Data Person Limited ("we", "us") is the data controller for the personal data described in this notice.
- Company number
- 13632844 (England & Wales)
- Registered office
- 32 Foxglove Way, Rudheath, Northwich, Cheshire, CW9 7XS
- ICO registration
- ZB302083
- Data-protection contact
- hello@thatdataperson.com
We are a small data consultancy. We have not appointed a statutory Data Protection Officer because we are not required to; the contact above handles all data-protection matters.
2. Whose data this notice covers
This notice covers personal data we process as a controller about:
- business contacts at our clients, prospective clients and suppliers;
- our own personnel, to the extent their data is processed to run the company; and
- people who contact us or visit this website.
It does not cover personal data we process on behalf of a client while delivering services to them. For that data the client is the controller, we act as their processor on their instructions, and the client's own privacy notice applies.
3. The personal data we collect and why
| Who | What we collect | Why | Lawful basis (UK GDPR Art. 6) |
|---|---|---|---|
| Client and prospective-client contacts | Name, job title, work email and phone, employer | Provide and administer our services; quote, contract, invoice and correspond | (b) contract; (f) legitimate interests in running and growing the business |
| Supplier and adviser contacts | Name, work contact details, account details | Buy in services and software; keep proper records | (b) contract; (f) legitimate interests |
| Our personnel | Name, address, date of birth, NI number, tax, payroll and bank details | Payroll, dividends, HMRC, Companies House and employment-law duties | (c) legal obligation; (b) contract |
| People who contact us | Name, email address or phone number, the content of the message or call | Respond to the enquiry | (f) legitimate interests in responding to people who contact us |
We do not market to individuals and we do not make automated decisions with legal or similarly significant effects. We do not knowingly collect special-category data, other than the minimum payroll-related data the law requires us to hold about our own personnel.
Where we need personal data to meet a legal obligation or to enter into or perform a contract, providing it is a statutory or contractual requirement, and without it we may be unable to provide our services, make required filings or pay you. Providing data in a general enquiry is voluntary.
4. This website
This website sets no cookies and uses no analytics or tracking. Our fonts are served from this site rather than a third party. The site is hosted by Cloudflare, which processes technical data such as IP addresses to deliver the site and protect it from abuse, acting as our processor. If you email or phone us, we handle your message as described above.
5. Where the data comes from
Directly from you (when you contact us, contract with us or supply us), from your employer in the course of a business relationship, and from public sources such as Companies House where relevant.
6. Who we share it with
- Our accountant, who processes payroll and accounting data on our behalf under contract;
- HMRC and Companies House, where we are legally required to file information;
- software and IT providers that host our email, phone line, files, website and business tools, as our processors; and
- professional advisers (for example legal or insurance) where needed.
We do not sell personal data. Where a provider stores or processes data outside the UK, we rely on UK adequacy regulations or, otherwise, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us which safeguard applies to a particular recipient and request a copy.
7. How long we keep it
| Data | Retention |
|---|---|
| Client and supplier contracts and correspondence | 6 years after the relationship ends |
| Accounting, payroll and tax records | 6 years from the end of the relevant accounting period |
| Statutory company records | Life of the company plus 10 years |
| General enquiries that don't become a relationship | Up to 12 months |
We delete or anonymise personal data once these periods expire and there is no other lawful reason to keep it.
8. How we protect it
We keep personal data on access-controlled, password-protected business systems, limit access to the directors, and use reputable providers with their own security measures.
9. Your rights
Under the UK GDPR you have the right to be informed; to access your data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; and to data portability, each subject to the conditions in the legislation. Where we rely on legitimate interests you can object to that processing. To exercise any right, emailhello@thatdataperson.com. We respond within one month.
10. Complaints
We'd like the chance to resolve any concern first, so please contact us. You also have the right to complain to the Information Commissioner's Office:ico.org.uk/make-a-complaint, 0303 123 1113.
11. Changes to this notice
We may update this notice. The version and date at the top show when it last changed.