VEMROPrivacy
Privacy notice.
How VEMRO Consulting collects, uses and protects your personal information.
Who we are
VEMRO Consulting is the trading name of Tommy Merryweather, a sole trader based in the UK. He is the data controller for personal information collected through this website and our enquiries (“we” and “us” in this notice).
Contact: [email protected]
What we collect and why
| Information | How we get it | Why (lawful basis) |
|---|---|---|
| Name, business name, email, optional phone, service of interest, optional budget and your message | When you email us — directly, or through the contact form, which opens your own email app | To reply and discuss possible work (legitimate interests; steps before entering a contract) |
| Booking details: name, email, chosen time and any answers you give | When you book a business audit through Calendly | To arrange and hold the call (steps before entering a contract) |
| Business and process information shared during a review or project | From you, during calls or work | To provide our services (contract; legitimate interests) |
| Invoicing and payment records | When we invoice you and you pay | To get paid and meet tax and accounting obligations (contract; legal obligation) |
| Technical data such as IP address and browser type | Automatically, when you visit the site | To deliver and secure the website (legitimate interests) |
Choices you make in the interactive examples and the services slider stay in your browser and are not sent to us.
We do not sell personal information. We do not use it for automated decisions that have legal or similarly significant effects on you.
Cookies
This website does not set its own cookies and does not use analytics or advertising trackers. See our cookie information.
Services that process data for us
- Cloudflare hosts this website. It may process technical data such as IP addresses to deliver and protect the site. Cloudflare Email Routing also forwards email sent to [email protected] to our inbox.
- Google (Gmail) provides our inbox. Our replies may come from our Gmail address.
- Google Fonts serves the typefaces on this website, so your browser connects to Google's servers.
- Calendly handles booking requests.
- Card payments, if you choose to pay by card, are processed by the payment provider named on the invoice. We never see or store your full card details.
Some of these providers process data outside the UK, including in the United States. Where they do, they rely on the safeguards UK data protection law requires, such as the UK International Data Transfer Addendum or the UK–US data bridge.
How long we keep information
- Enquiries that don't lead to work (emails, form messages and booking details): reviewed regularly and deleted within 12 months of our last contact, or sooner if you ask.
- Client project information: kept while we work together and afterwards only for as long as it's needed — for example, for agreed support or to answer questions about the work. We review it when an engagement ends and delete what we no longer need.
- Financial and tax records (invoices and payments): kept for as long as UK tax law requires. For a sole trader, that is at least five years after the 31 January Self Assessment deadline for the tax year they relate to.
Your rights
Under UK data protection law you have the right to:
- access a copy of your information;
- have it corrected or erased;
- restrict or object to how we use it;
- receive it in a format you can take elsewhere (data portability).
To use any of these rights, email [email protected]. We will respond within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.
Changes
We may update this notice. The date at the top shows when it last changed.