Who is Adytum Data Consultancy Limited?
Adytum Data Consultancy Limited is registered in England with company number 17445053. We are registered with the Information Commissioner’s Office in the United Kingdom with registration number ZC265083.
If you would like to exercise one of your rights as set out in this Privacy Notice, or you have a question, query, or complaint about this Privacy Notice or the way your personal data is processed, please contact privacy@thefractionaldpo.co.uk.
What services does Adytum Data Consultancy Limited offer?
Adytum Data Consultancy Limited is an information governance consultancy firm specialising in UK and EU data protection law and the freedom of information act. We work with businesses to deliver expert data protection and privacy advice and support as part of a fractional service.
Further details of our services can be found on our website.
When does Adytum Data Consultancy Limited act as a data controller?
We act as the data controller for personal data we hold:
- About our clients (including contact within our clients’ businesses)
- About prospective clients (including contact within our clients’ businesses)
Adytum Data Consultancy Limited is the data controller for the personal data we process, unless otherwise stated.
When does Adytum Data Consultancy Limited act as a data processor?
In some circumstances, when acting on behalf of our clients, we will ave access to or hold information as a data processor. We may hold data to provide information, advice and guidance in our consultancy role or to support with the facilitation of a data subject access request (DSAR).
Any requests made to us in our capacity as a data processor, for example, data subject right requests or complaints, will be reported to our client and we will then proceed in line with client instruction.
How does Adytum Data Consultancy Limited collect my personal data?
Where we are acting as a data controller, we may have obtained your personal data directly or indirectly through a number of channels.
We may have collected your information directly from you when you have:
- Visited our website
- Completed a contact form
- Contacted us by phone
- Met with or engaged with us at an event, exhibition or conference
- Interacted with us on LinkedIn
In some circumstances, we may collect your information indirectly, such as:
- Referrals from existing and prospective clients.
- From publicly available sources when it is in Our legitimate interest to do so.
Where we are acting as a data processor, we will only receive information under instruction from our clients.
What personal data does Adytum Data Consultancy Limited collect about me?
Personal Data Category | Personal Data |
Browser and user information | All cookies placed by Google and Odoo |
Complaint information | The nature of your complaint and associated correspondence |
Contract Information | Any information you provide to us to allow us to contact you |
Cookies | Technologies that track interaction with our website |
Engagement and usage | Data about how you engage with and use our services |
Surveys and opinions | Information you provide when you leave feedback or complete surveys |
We do not intentionally or knowingly collect or process special category data or criminal convictions and offences data where we are acting as a data controller under this privacy notice.
What is the purpose and lawful basis for processing my personal data?
Please see below for information on the personal data processed, purpose, and the applicable lawful basis:
Purpose | Personal Data Category | Lawful Basis |
To contact you following an enquiry | Contact Information | Legitimate Interests |
To manage data subject right requests | Contact Information Information within your DSAR | Legal Obligation |
Fulfilling our contract to provide you with the agreed service | Contact Information | Contract |
Processing your orders | Contact Information | Contract |
Processing payments, refunds and financial record keeping | Contact Information | Contract |
For statistical analysis and to get feedback from you about our service | Contact information Surveys and opinions Engagement and usage | Legitimate Interests |
The reliable and safe operation of our IT infrastructure including website | Contact information Engagement and usage Cookies Browser and user information | Legitimate Interests |
Contacting you for sales and prospecting | Contact Information Engagement and usage | Legitimate Interests |
Marketing and analytics from our website using cookies | Cookies Browser and user information | Consent |
Transpose calls using Microsoft Co-pilot when having Teams calls | Contact Information Voice data during call | Legitimate Interests |
To make recommendations to you about goods or services that may be of interest to you. We may use insight delivered by artificial intelligence to make recommendations based on customer profiles built from aggregated customer data. These customer profiles are created using your data such as industry, engagement data and advisory case data. | Contact information Surveys and opinions Complaint information Engagement and usage Cookies | Legitimate Interests |
We will not store, process or transfer your data unless we have a lawful basis. We will only use your personal data for its original purpose unless we reasonably need it for another compatible reason. If we do, we will notify you of the change and explain the lawful basis. Please note we may process your data without your knowledge or consent where required or permitted by law.
How long does Adytum Data Consultancy Limited Limited keep my personal data?
Different data assets are retained for different retention periods depending on the purposes that it was collected for, as well as the requirements of any applicable law or regulation.
Prospective client details are held for three years after our last contact with you or some other identifiable action, at which point your information will be deleted.
For clients, six years from the end of the financial year you are no longer a customer.
We may also retain your personal data for longer periods where we need to exercise, establish, or defend against legal claims. When personal data is no longer required, we delete or anonymise data in line with data protection legislation and applicable industry guidance.
Your data rights
Where we are acting as a data controller, and under certain circumstances, by law you have a number of rights:
Right to be informed
You have the right to know what information we collect about you and how we use it. We communicate this information through this privacy notice.
Right of access
You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
Right to rectification
You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
Right to erasure
You have the right to ask us to delete your personal information.
Right to restrict processing
You have the right to ask us to limit how we can use your personal information.
Right to data portability
You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
Right to object
You have the right to object to the processing of your personal data. When we use consent as our lawful basis you have the right to withdraw your consent at any time.
Rights related to automated decision making and profiling
We do not use any automated decision making or profiling.
For your protection and to protect the privacy of others, we may need to verify your identity before completing your request.
If you would like to exercise any of these rights or would like to confirm the accuracy of your information, please contact privacy@adytum.co.uk.
Where we determine that your request is for information that we hold in our capacity as a data processor, we will pass the request on to our client (the data controller) and will act under their direction.
Automated decision making and profiling
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
How do we protect your data?
We have implemented appropriate security measures to prevent accidental loss, unauthorised use, access, alteration or disclosure of your personal data. Furthermore, access to your personal data is restricted to employees, contractors and trusted third parties who have a legitimate business need to know.
Your data will be processed in the UK or EEA as all our core business systems are held within the UK and EEA. The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge). Where applicable we also establish written contracts with our data processors which include the addendum to the EU Standard Contractual Clauses (SCCs).
Will Adytum Data Consultancy Limited share my personal data with other organisations?
We may disclose the personal data We hold about you to:
- With companies affiliated with us when this is necessary to deliver our services.
- Banks and other financial institutions.
- Payment service providers.
- Your employer or the corporate entity that you represent, solely for the purposes of providing the services to you and/or your employer where we have a contract with your employer or the company you represent.
- Third party companies in the event that we are involved in a corporate transaction, such as an actual or potential merger, joint venture, consolidation, or asset sale. We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy notice, be permitted to use that data only for the purposes for which it was originally collected by us.
- Our professional advisors, such as lawyers, accountants, auditors, financial services providers, and other professionals.
- Our service providers as data processors on our behalf, including IT hosting companies. We have Data Processor Agreements in place with our data processors. This means that they cannot do anything with your personal data unless we have instructed them to do it. They will not share your personal data with any organisation apart from us or further Sub-Processors who must comply with Our Data Processor Agreement. They will hold your personal data securely and retain it for the period we instruct. Further, they must process the personal data in accordance with this Privacy Notice and as permitted by applicable data protection laws.
- We release account and other personal data when we believe release is appropriate to comply with the law, enforce or apply our agreements with our customers or suppliers, or protect the rights, property, or safety of Our users or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction. However, this does not include selling, renting, sharing, or otherwise disclosing personally identifiable information from customers for commercial purposes in a way that is contrary to the commitments made in this Privacy Notice.
- Regulatory authorities as required by any such authority, including tax authorities.
- Law enforcement agencies, courts, and other relevant tribunals.
How can I make a complaint?
You have the right to make a complaint if you are unhappy about how your personal data is processed. We ask that in the first instance you raise the complaint with ourselves and give us the opportunity to put things right. We ask that you email privacy@adytum.co.uk.
Information Commissioner's Office
If you remain dissatisfied, you may wish to contact the Supervisory Authority. You have the right to complain about the use of your personal data to the local Supervisory Authority, which in the UK is the Information Commissioner’s Office.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
A listing of each EU country’s Supervisory Authority can be found on the link below:
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Updates to this privacy notice
We may update this Privacy Notice from time to time, for example, if the law changes. Any updates take effect when we publish a new version. For significant changes, we may contact you to let you know.
This privacy notice was last updated on 5 September 2026.