Privacy Notice

Goose Advisory Ltd respects your privacy. This notice explains how we collect and use personal information when you use our website or contact us.

Who we are

Goose Advisory Ltd is a company registered in England and Wales under company number 16338584.

Our registered office is:

Goose Barn
Little Casterton
Stamford
England
PE9 4BE

For the purposes of UK data protection law, Goose Advisory Ltd is the data controller.

If you have a question about this notice or how we use your personal information, contact us at enquiries@gooseadvisory.com.

Information we collect

When you use our contact form, we collect:

• your name;
• your email address;
• your organisation, if you choose to provide it; and
• the information you include in your message.

Our website and hosting infrastructure also process limited technical information needed to operate and secure the service. This may include information associated with a web request, such as network and request information.

We do not use the website to make automated decisions about you or to profile you.

How we use your information

We use information submitted through the website to:

• receive and respond to enquiries;
• understand what you are contacting us about;
• communicate with you about your enquiry;
• protect the website and contact service from misuse; and
• maintain the security and reliability of the website.

If an enquiry leads to a business relationship, we may subsequently process relevant information for additional purposes connected with that relationship. Where appropriate, we will provide further privacy information.

Our lawful basis

We normally rely on our legitimate interests when processing information submitted through the website. Those interests include responding to people who contact us, developing potential business relationships and operating a secure and effective website.

Where you contact us about entering into or performing a contract, processing may instead be necessary to take steps at your request before entering into a contract or to perform that contract.

We consider the nature of the information, what people would reasonably expect and the impact on their privacy when relying on legitimate interests.

How the contact form works

Contact-form submissions are processed by the Goose Advisory website hosted using Amazon Web Services.

The form sends an email notification to enquiries@gooseadvisory.com using Amazon Simple Email Service (SES). The mailbox is hosted using Microsoft 365.

We do not maintain a separate database of contact-form submissions as part of the website.

Operational logs are designed not to contain the name, email address, organisation or message submitted through the form. Website operational logs are currently retained for seven days.

Ordinary website enquiries held in our business email system are normally retained for 24 months after the last substantive interaction.

We may retain information for longer where an enquiry develops into an ongoing client or business relationship, or where longer retention is reasonably required for legal, regulatory, accounting or dispute purposes.

Who we share information with

We use service providers where necessary to operate the website and business. These currently include:

Amazon Web Services (AWS) --- website hosting, server processing, operational logging and sending contact-form email.

Microsoft 365 --- receiving and storing business email.

Google Ireland Limited — the provider identified in the standard UK Google Analytics terms for the optional analytics described below. For analytics personal data processed on our behalf, Google acts as a processor under the applicable Data Processing Terms. Google’s privacy information also explains processing it carries out for its own purposes.

These organisations process information subject to their own contractual and data-protection arrangements.

We may also disclose information where required by law, regulation, legal process or to establish, exercise or defend legal rights.

We do not sell personal information.

International transfers

Some of our service providers operate internationally and information may therefore be processed outside the UK.

Where personal information is transferred internationally, we require an appropriate legal mechanism or safeguard to be available under UK data protection law.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for relevant legal, regulatory or business requirements.

Operational website logs are currently retained for seven days.

Ordinary website enquiries are normally retained for 24 months after the last substantive interaction.

Information may be retained for longer where the enquiry becomes part of an ongoing client or business relationship or where this is reasonably necessary for legal, regulatory, accounting or dispute purposes.

We periodically review information that we no longer need.

Your rights

Depending on the circumstances, UK data protection law may give you rights to:

• ask for access to your personal information;
• ask us to correct inaccurate information;
• ask us to delete information;
• ask us to restrict how information is used;
• object to certain processing; and
• receive certain information in a portable form.

Not all rights apply in every circumstance.

Where we rely on legitimate interests, you have the right to object to our processing of your personal information.

Where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent. The optional analytics section explains how to change your choice.

To exercise a right, contact enquiries@gooseadvisory.com.

Complaints

If you are concerned about how we have handled your personal information, please contact us first at enquiries@gooseadvisory.com so that we can investigate.

You also have the right to complain to the Information Commissioner's Office.

Links to other websites

Our website contains links to websites operated by other organisations. Their handling of personal information is governed by their own privacy notices, not this one.

Optional website analytics

We use optional Google Analytics 4 only when you accept analytics. You can browse the website and contact us without accepting.

Google Analytics 4, provided under the applicable UK terms by Google Ireland Limited, helps us understand use of our website and improve our pages and resources. We do not load Google Analytics or send analytics requests before you explicitly accept analytics. Choosing No thanks declines optional analytics and does not stop you browsing the website or contacting us.

Consented analytics measures page and article views, visits and sessions, limited referring-source information, clicks on resource-download links, selected external links and whether an enquiry was accepted for sending. A download-link click is not proof of a completed download, and an accepted enquiry is not proof that an email was delivered. These measurements describe activity from consenting browsers, not every visitor or unique individual.

Google also receives cookie-generated browser and session identifiers, basic browser/device information, coarse geographic information and network information, including your IP address when a request reaches its servers. Disabling detailed collection does not make analytics anonymous or remove all technical information. We do not include your name, email address, organisation, message, form contents or a website user ID in the analytics events constructed by our website. We exclude query strings and fragments from the page addresses we send and restrict referring-source information.

We rely on your consent for optional analytics and its cookies. This does not change the legitimate-interests or contractual bases described above for contact enquiries. Necessary preference storage is used only to remember and enforce your choice, including refusal; where this involves personal information, our basis is our legitimate interests in honouring your privacy instructions and operating the website securely.

The analytics property is restricted to analytics-only use: Enhanced Measurement, Google Signals, user-provided data collection and advertising personalisation are disabled, there are no Google Ads links, and granular location/device collection is disabled. Granular collection includes city and detailed device/browser attributes. We do not use this analytics feature for personalised advertising, remarketing or cross-site profiling.

Use Cookie settings in the footer to reopen the dialog. Choose No thanks to reject or withdraw analytics, or choose Manage preferences and save your analytics choice. Accept all permits the single optional analytics category; it does not authorise advertising. Closing the dialog or continuing to browse does not grant consent or change an existing valid choice.

Withdrawal prevents newly initiated analytics collection in that page document and removes accessible first-party Google Analytics cookies. It does not automatically erase information already collected or recall requests already in transit. Other open tabs apply a changed choice when the browser processes it; a paused tab may update when resumed. Different browsers and devices have separate choices.

If you accept analytics again after withdrawal, it can resume only in a fresh page document. Where your choice can be saved, we refresh the page after acceptance unless the page contains a form, when analytics remains disabled until a page refresh to preserve your draft or pending submission. If browser storage is unavailable, the choice is kept only in that page’s memory and automatic reactivation after withdrawal is not possible. You may need to choose again after refreshing.

The Google Analytics property is configured for two-month user-level and event-level data retention, with reset on new activity disabled. This setting applies to the data covered by Google’s retention control; standard aggregated reports may remain available for longer. The separate browser-storage periods are explained in our Cookie Policy. Withdrawing consent does not replace a request to exercise any applicable deletion rights; contact enquiries@gooseadvisory.com about such a request.

Google processing and international transfers

Google’s applicable Analytics Terms of Service and Data Processing Terms govern analytics processing. Google and its subprocessors may process information outside the UK, including in the United States. For transfers to Google Ireland Limited, we rely on UK adequacy arrangements for Ireland. Other transfers are covered, where applicable, by recognised adequacy arrangements, including the UK Extension to the EU–US Data Privacy Framework for covered certified recipients, or approved contractual safeguards with the applicable UK provisions and any necessary additional protections. These arrangements do not mean that all processing takes place in the UK.

Contact enquiries@gooseadvisory.com for information about the safeguards that apply and how to obtain a copy where available. Google’s explanation of its handling of website information is available at How Google uses information from sites or apps that use our services.

Consent preferences and reporting

The consent feature stores the choice locally in your browser. It does not create centralised Accept/Reject statistics, send rejection decisions to Google Analytics or create a visitor identifier for consent reporting. Any future aggregate consent-reporting feature would require a separate review and updated information before it is introduced.

Changes to this notice

We may update this Privacy Notice if the website, our services or relevant legal requirements change. The latest version will always be published on this page.