Privacy Policy

Navexela Ltd navexela.com Last updated: June 2026

1. Who we are

Navexela Ltd is a strategic management consultancy registered in Scotland, United Kingdom. We are the data controller for personal data collected through this website and in the course of our business activities.

For any questions about this policy or how we handle your personal data, contact us at:

Email: info@navexela.com Registered address: 9 Mackenzie Gardens Dolphinton West Linton EH46 7HS Companies House number: 517 1513 16

2. Legal framework

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we process personal data of individuals in the European Economic Area, we also apply the standards of the EU GDPR.

3. What data we collect and why

We collect personal data only where there is a lawful basis to do so.

Contact and inquiry data (name, email address, phone number, company name, job title): collected when you contact us via the website, by email, or to request a consultation. Legal basis: legitimate interests / steps taken prior to entering a contract.

Client and project data (contact details, company information, correspondence, engagement records): collected and processed as part of a client engagement. Legal basis: performance of a contract.

Website usage data (IP address, browser type, pages visited, timestamps): collected through server logs and, where applicable, analytics tools. Legal basis: legitimate interests in maintaining and improving website performance.

We do not collect special category data (such as health, biometric, or political data) and do not use automated decision-making or profiling.

4. How we use your data

We use personal data to:

  • Respond to enquiries and provide requested information

  • Prepare, execute, and administer consulting engagements

  • Maintain the business relationship and associated records

  • Meet legal and financial obligations, including invoicing and tax compliance

  • Improve our website and services

We do not sell personal data to third parties.

5. Who we share data with

We may share personal data with:

  • Professional service providers (accountants, legal advisers) bound by confidentiality obligations

  • IT and hosting providers operating under data processing agreements

  • Regulatory or public authorities where required by law

We do not transfer personal data outside the UK or EEA without appropriate safeguards in place (such as UK International Data Transfer Agreements or EU Standard Contractual Clauses, as applicable).

6. How long we keep your data

  • Inquiry and contact data: up to 12 months after last contact, unless a client engagement follows

  • Client and project data: 6 years after project completion, in line with UK statutory limitation periods and HMRC requirements

  • Website logs: up to 3 months

7. Your rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Have inaccurate data corrected

  • Request erasure where no legal retention obligation applies

  • Object to processing based on legitimate interests

  • Request restriction of processing

  • Receive your data in a portable format where applicable

To exercise any of these rights, contact us at the details in section 1. We will respond within one month. You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO) ico.org.uk | 0303 123 1113

If you are based in the EU and believe we have mishandled your data, you may also contact your local data protection authority.

8. Cookies

This website may use functional cookies necessary for basic operation. If analytical or tracking cookies are used, you will be informed and asked for consent before any are placed. You can manage or withdraw consent at any time through your browser settings.

9. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Access is limited to those who need it for legitimate business purposes.

10. Changes to this policy

We may update this policy when our practices change or when legislation requires it. The current version is always available at navexela.com/privacy.

Fill in the bracketed fields. One practical note: if Navexela is not yet registered with the ICO as a data controller, that registration costs £40/year for small organisations and is a legal requirement in the UK for most businesses that process personal data.