Summary
- We collect only the minimum personal data needed to respond to enquiries and deliver advisory services.
- We use it on the basis of legitimate interests and contractual necessity.
- We do not sell your data, and we do not use it for automated decision-making or profiling.
- This website does not use cookies, analytics or advertising trackers.
- You can ask us to access, correct or delete your data, and you can complain to the ICO.
1. Who we are
Zheng Advisory Limited (“we”, “us”) is a company registered in England & Wales, Company No. 17241071. We are the data controller for the personal data described in this notice, which means we decide how and why it is used.
We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, under the oversight of the Information Commissioner's Office (ICO).
Contact for all data protection matters: info@zhengadvisory.co.uk.
2. Personal data we collect
We only collect minimal personal data necessary for professional technical consultation and service delivery. This is:
- Contact information: name, corporate email address, phone number and job title.
- Booking details submitted via Microsoft Bookings or by direct email communication.
- Enquiry content: the information you choose to include in your message, such as a description of your project or technical requirements.
Where it comes from: we collect this information directly from you when you email us, book a consultation, or contact us through this website. We do not obtain it from third parties.
We do not intentionally collect special category data (such as health or biometric data) or data relating to children.
3. How and why we use your personal data
Under UK GDPR we must have a lawful basis for using your personal data. Ours are set out below.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to engineering enquiries and arranging initial consultations | Contact information, booking details, enquiry content | Legitimate interests — UK GDPR Art. 6(1)(f) |
| Delivering advisory services and FEED packages, and managing the client relationship | Contact information, project correspondence | Contractual necessity — UK GDPR Art. 6(1)(b) |
| Keeping the business, accounting and tax records we are legally required to keep | Contact and invoicing details | Legal obligation — UK GDPR Art. 6(1)(c) |
Our legitimate interests
Our legitimate interest is to respond to professional enquiries from prospective clients and to run a consultancy business. We have considered the balance between this interest and your rights: the data involved is limited to business contact details and the content of your enquiry, which you would reasonably expect us to use in order to reply. You have the right to object (see section 8).
Providing your data
You are not required by law to give us your personal data. However, we cannot respond to an enquiry or deliver a service without suitable contact details.
Automated decisions
We do not make decisions about you using solely automated processing, and we do not carry out profiling.
4. Who we share your data with
We do not sell your personal data. We only share it with:
- Service providers (processors) that help us run the business, such as our email provider and Microsoft Bookings, acting on our instructions and subject to appropriate contracts.
- Professional advisers (for example accountants or legal advisers), where necessary and under a duty of confidentiality.
- Authorities such as HMRC or law enforcement, where we are legally required to do so.
5. International transfers
Some of our service providers (including Microsoft) may process data outside the UK. Where this happens, we rely on a lawful transfer mechanism under UK GDPR, such as UK adequacy regulations, or the ICO's International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep your data
We keep personal data only for as long as it is needed for the purpose it was collected, and then delete or anonymise it. In practice:
- Enquiries that do not lead to an engagement are kept only for as long as needed to respond to you and handle reasonable follow-up.
- Client engagement records are kept for the duration of the engagement and afterwards for as long as needed to meet legal, accounting and tax obligations and to deal with potential claims.
7. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, and we limit access to those who need it. Email is not a perfectly secure medium, so please avoid sending highly sensitive information in an initial enquiry.
8. Your rights under UK data protection law
In line with ICO guidance, you have the following rights. Not all of them apply in every situation.
- Right of access — to receive a copy of the personal data we hold about you.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure — to have your data deleted in certain circumstances.
- Right to restrict processing — to limit how we use your data in certain circumstances.
- Right to data portability — to receive data you provided in a structured, commonly used, machine-readable format, where processing is based on contract and carried out by automated means.
- Right to object — to object to processing based on legitimate interests.
- Rights related to automated decision-making — not applicable, as we do not carry out such processing.
- Right to withdraw consent — where we rely on consent (we do not currently rely on it for any of the purposes above).
To exercise any of these rights, email info@zhengadvisory.co.uk. We will normally respond within one month and will not charge a fee unless a request is manifestly unfounded or excessive. We may need to verify your identity first. For more detail, see the ICO's guide to your data protection rights.
9. Cookies and this website
This website does not set cookies and does not use analytics, advertising or social-media tracking. Fonts and other assets are served from this site rather than from third parties, so visiting does not send your IP address to external font or tracking providers. Our hosting provider may keep standard server logs (such as IP address and pages requested) for security and reliability purposes.
The contact form on this site does not transmit data to us directly. It opens your own email application with a pre-filled message, and we only receive it if you choose to send that email. Links to external services such as Microsoft Bookings are governed by those providers' own privacy notices.
10. Contact and complaints
If you have any questions or concerns about how we use your data, please contact us first at info@zhengadvisory.co.uk so we can try to resolve it.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
11. Changes to this notice
We may update this notice from time to time to reflect changes in our practices or the law. The date at the top of this page shows when it was last revised.