Eniola Cole Ltd

Privacy Policy

Effective: 3 March 2026

1. Who We Are

Eniola Cole Ltd ("ECL", "we", "us", "our") is a UK-registered consultancy specialising in executive coaching, leadership development, talent architecture, and people systems advisory. We are committed to protecting the privacy of everyone who interacts with our website and services.

  • Company Name: Eniola Cole Ltd
  • Company Number: SC874654
  • Registered in: Scotland, United Kingdom
  • Operating Locations: London, Midlands & Glasgow
  • Website: www.eniolacole.com
  • Contact Email: contactus@eniolacole.com

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Eniola Cole Ltd is the data controller.

2. What Data We Collect

We may collect and process the following personal data:

Information You Provide Directly

  • Contact form submissions: your name, email address, organisation, and the content of your message when you use our contact form
  • Consultation bookings: your name, email address, and any details you provide when scheduling a meeting via our Calendly integration
  • Email correspondence: information shared through direct email exchanges

Information Collected Automatically

  • Usage data: pages visited, time spent on pages, referring URLs, and navigation paths
  • Device information: browser type, operating system, screen resolution, and device type
  • Cookies and similar technologies: as described in our Cookie Policy

3. How We Use Your Data

We process your personal data for the following purposes:

  • To respond to enquiries: processing contact form submissions and consultation requests (legal basis: legitimate interest)
  • To provide our services: delivering executive coaching, leadership development programmes, and advisory services to clients (legal basis: contractual necessity)
  • To improve our website: analysing usage patterns to enhance user experience (legal basis: legitimate interest)
  • To send relevant communications: sharing insights, briefings, or service updates where you have expressed interest (legal basis: consent)
  • To comply with legal obligations: meeting regulatory and legal requirements (legal basis: legal obligation)

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases:

  • Consent: where you have given clear consent for us to process your personal data for a specific purpose
  • Contractual necessity: where processing is necessary for the performance of a contract or to take steps at your request before entering into a contract
  • Legitimate interest: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms
  • Legal obligation: where processing is necessary for compliance with a legal obligation

5. Third-Party Services

We use the following third-party services that may process your data:

  • Calendly (scheduling): when you book a consultation, your data is processed by Calendly Inc. in accordance with their privacy policy
  • Cloudinary (media hosting): images and media files displayed on our website are hosted via Cloudinary
  • Render (web hosting): our website infrastructure is hosted on Render's platform
  • Vercel (frontend hosting): our website frontend may be hosted on Vercel's platform

These providers act as data processors on our behalf and are required to process your data only as we instruct and in compliance with applicable data protection legislation.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: retained for up to 24 months after your last interaction, then securely deleted
  • Client engagement records: retained for the duration of the engagement plus 6 years to comply with legal and regulatory obligations
  • Website analytics data: retained in anonymised form for up to 26 months

7. Your Rights

Under the UK GDPR, you have the following rights:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: request correction of inaccurate or incomplete data
  • Right to erasure: request deletion of your personal data where there is no compelling reason for its continued processing
  • Right to restrict processing: request that we limit how we use your data
  • Right to data portability: request your data in a structured, commonly used, machine-readable format
  • Right to object: object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at contactus@eniolacole.com. We will respond to your request within one month.

8. International Data Transfers

Your data is primarily processed within the United Kingdom and the European Economic Area. Where data is transferred to countries outside the UK/EEA (for example, through our use of US-based service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure hosting environments, and restricted access controls.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

12. Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: