Privacy Policy
Effective: 1 July 2026
1. Who we are
Eniola Cole Ltd ("ECL", "we", "us" or "our") is a private limited company registered in Scotland under company number SC874654. Our registered office is 2/2 48 West George Street, Glasgow, Scotland, G2 1BP.
ECL provides executive coaching, leadership development, talent and succession advisory work, Board workforce advisory support and related digital infrastructure. For the purposes of UK data protection law, ECL is the controller for personal data collected through this website and through direct enquiries unless a separate client agreement states otherwise.
Contact: hello@eniolacole.com.
2. Personal data we collect
We may collect:
- Contact details, including your name, professional email address, organisation, role and message.
- Booking information if you use Calendly or another scheduling service to arrange a conversation.
- Professional context you choose to provide about leadership, workforce, succession, governance or organisational priorities.
- Technical information needed to operate and secure the website, such as server logs, device/browser information and local storage preferences.
- Engagement records where you become a client, participant or approved user of an ECL service.
Please avoid submitting health information, equality information, access needs, workplace concerns or other sensitive personal data through the website unless it is necessary for your enquiry. If you choose to provide such information, we will handle it confidentially and only to the extent necessary to respond to your enquiry, consider appropriate support or comply with legal obligations.
3. How we use personal data
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to enquiries | Contact details and message content | Legitimate interests |
| Scheduling conversations | Contact details and booking information | Legitimate interests |
| Providing agreed services | Client, participant and engagement records | Contract or steps before contract |
| Managing legal, finance and governance records | Engagement and correspondence records | Legal obligation and legitimate interests |
| Improving and securing the website | Technical data and local preference storage | Legitimate interests |
| Sending requested updates or resources | Contact details and communication preferences | Consent or legitimate interests, depending on context |
Where special category data is provided, we will identify an Article 9 condition where required, such as explicit consent, employment/social protection obligations where applicable, or substantial public interest where the law permits. We do not use special category data for advertising or profiling.
4. Sharing personal data
We use trusted service providers to operate the website and respond to enquiries. These may include website hosting providers, Strapi CMS, Resend for email delivery, Calendly for scheduling, Cloudinary for media hosting and professional advisers where needed. These providers may process personal data only for agreed purposes and under appropriate safeguards.
We may also share information where required by law, to protect legal rights, or as part of agreed client delivery.
5. International transfers
Some providers may process data outside the UK. Where this happens, we rely on appropriate safeguards such as UK adequacy regulations, standard contractual clauses, the UK International Data Transfer Agreement or other lawful transfer mechanisms.
6. Retention
We keep personal data only for as long as necessary:
- Website enquiries: normally up to 24 months unless they become part of an active engagement.
- Client engagement records: normally for the engagement period plus 6 years.
- Finance and legal records: as required by law.
- Cookie or local storage preferences: until you clear browser storage or the preference is replaced.
- Marketing or resource updates: until you unsubscribe or withdraw consent.
7. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing of your personal data, and to withdraw consent where consent is the lawful basis. You may also have a right to data portability in limited circumstances.
To exercise your rights, contact hello@eniolacole.com. We may need to verify your identity before responding.
8. Security
We use proportionate technical and organisational measures to protect personal data. No website or email service can be guaranteed completely secure, so please avoid sending unnecessary sensitive information through website forms.
9. Complaints
You can contact us first at hello@eniolacole.com. You also have the right to complain to the Information Commissioner's Office at https://ico.org.uk.
10. Updates
We may update this Privacy Policy to reflect changes in our services, suppliers or legal obligations.