Legal
Privacy Policy
Last updated: 03 July 2026
Who we are
This website, hitenshah.co.uk, is operated by Hiten Shah, a sole trader based in the United Kingdom. Hiten Shah is the data controller for personal data collected through this website.
ICO registration number: ZC185896
If you have any questions about this Privacy Policy or how your personal data is handled, you can contact us at:
Email: contact@hitenshah.co.uk
Post: Unit 15134, PO Box 6945, London, W1A 6US
What data we collect and why
Contact form
When you use the contact form on this website, we collect your first name, last name, email address, the topic of your enquiry, and the message you submit. We use this information to respond to your enquiry.
The legal basis for processing this data is legitimate interests: we have a legitimate interest in responding to messages sent to us through our own website.
Booking enquiries
When you book a discovery call or consultation via the booking widget on this website, the booking is handled directly by TidyCal (tidycal.com), a third-party scheduling platform. TidyCal collects your name and email address to manage the booking. We receive a notification of your booking, which includes this information, so that we can prepare for and attend the call.
TidyCal’s own privacy policy applies to data collected through their platform. You can read it at tidycal.com/privacy.
The legal basis for our handling of this data is contractual necessity: the information is needed to fulfil the service you have requested.
Email newsletter
If you choose to sign up to our email newsletter via the sign-up form on this website, we collect your email address. We use this to send you updates, tips, and information about our services. We will only send you marketing emails where you have given your explicit consent to receive them.
You can unsubscribe at any time by clicking the unsubscribe link in any email we send you.
The legal basis for this is consent.
Website analytics
This website uses Google Analytics to understand how visitors use the site. Google Analytics collects information including your IP address, the pages you visit, how long you spend on each page, and the device and browser you are using. Google Analytics uses pseudonymisation techniques, but this data may still constitute personal data under data protection law.
Google Analytics uses cookies to collect this data (see the Cookies section below).
The legal basis for using Google Analytics is your consent. We will only activate Google Analytics tracking once you have accepted analytics cookies via our cookie consent banner. You can withdraw your consent at any time by adjusting your cookie preferences using the cookie settings link in the footer of this website.
You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.
Server logs
Our hosting provider, CloudAbove, automatically records standard server log data when you visit this website. This includes your IP address, the date and time of your visit, the pages you requested, and your browser type. This data is held by CloudAbove for security and operational purposes.
The legal basis for this is legitimate interests: maintaining the security and performance of the website.
How long we keep your data
| Data | Retention period |
|---|---|
| Contact form enquiries | 2 years from the date of your message, or until the matter is resolved, whichever is later |
| Booking information | 2 years from the date of the booking |
| Newsletter email address | Until you unsubscribe |
| Google Analytics data | 14 months (Google’s default retention setting) |
| Server logs | As set by CloudAbove’s standard data retention policy |
Third parties we share data with
We do not sell your personal data. We share data only with the following third-party service providers, strictly as needed to operate this website and deliver our services:
- TidyCal (tidycal.com): booking management. Privacy policy: tidycal.com/privacy
- Google LLC (Google Analytics): website analytics. Data is transferred to the United States under the UK-US Data Bridge, which provides an adequate level of data protection. Privacy policy: policies.google.com/privacy
- CloudAbove: website hosting and server infrastructure. Any international transfers of data are governed by CloudAbove’s own data transfer arrangements. Privacy policy: cloudabove.com/privacy-policy
- [Email newsletter platform: to be added when selected]: email newsletter delivery
We may also disclose personal data if required to do so by law, or to protect our legal rights.
International data transfers
Some of our third-party service providers are based outside the United Kingdom. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place.
Google LLC transfers data to the United States and is certified under the UK-US Data Bridge, which has been recognised by the UK Government as providing an adequate level of protection for personal data. CloudAbove’s international transfer arrangements are set out in their own privacy policy.
Cookies
Cookies are small text files placed on your device when you visit a website. This website uses the following cookies:
Strictly necessary cookies
These are required for the website to function and cannot be switched off. They include cookies set by our caching plugin to improve site performance. No consent is required for these cookies.
Analytics cookies
When you consent to analytics cookies, Google Analytics sets cookies to help us understand how visitors use this website. These cookies will not be set unless you have given your consent via our cookie banner.
You can control and delete cookies at any time through your browser settings, or by adjusting your preferences via the cookie settings link in the footer of this website. Please note that disabling certain cookies may affect how the website functions.
Your rights
Under UK data protection law, you have the following rights regarding your personal data:
- The right to access: you can request a copy of the personal data we hold about you.
- The right to rectification: you can ask us to correct any inaccurate or incomplete data.
- The right to erasure: you can ask us to delete your personal data in certain circumstances.
- The right to restrict processing: you can ask us to limit how we use your data in certain circumstances.
- The right to data portability: you can ask us to provide your data in a portable format where technically feasible.
- The right to object: you can object to us processing your data where we rely on legitimate interests as the legal basis.
- The right to withdraw consent: where we process your data on the basis of consent (such as for the newsletter or analytics cookies), you can withdraw that consent at any time.
- The right not to be subject to automated decision-making: you have the right not to be subject to decisions made solely by automated means that have a legal or similarly significant effect on you. This website does not carry out any such automated decision-making.
To exercise any of these rights, contact us at contact@hitenshah.co.uk. We will respond within one month. In complex cases, or where you have made multiple requests, we may extend this period by a further two months. We will notify you within one month if an extension is required.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
We would ask that you contact us directly first so that we can try to resolve your concern before you escalate to the ICO.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to check this page periodically.