Privacy Notice

At Enable Great Limited, protecting your privacy and responsibly handling your personal data in line with UK data protection law is a priority. This includes the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations (PECR)

Who We Are

Enable Great Limited (Company No. 16488176) is the data controller for the personal information we collect and process. We are registered in England and Wales with our registered office at Faulkner House, 31 West Street, Wimborne, Dorset, England, BH21 1JS.

What Personal Data We Collect

Website Analytics: When you visit our website and consent to analytics cookies, we use Microsoft Clarity to help us understand how visitors interact with our pages. Clarity collects technical and usage information such as device type, browser details, interaction patterns (including clicks, scroll behaviour, and navigation), and approximate geographic region. Clarity does not retain full IP addresses, and we configure it to mask form fields and sensitive on‑page content. Analytics scripts load only after you provide consent via our cookie banner. Microsoft acts as an independent data controller for certain analytics data collected through Clarity, as described in the Microsoft Privacy Statement.

Contact Forms: We use Google reCAPTCHA to protect our forms and systems from spam and abuse. reCAPTCHA is an essential security feature and loads automatically when a form is present. Google processes technical information such as your IP address and browser characteristics for fraud detection on our behalf, as our data processor under Google's Cloud Data Processing Addendum. When you complete our contact form, we collect the following personal details:

• Your name and job title (where provided)
• Company name and contact details (email address, phone number where provided)
• The services you're interested in
• Any additional information you choose to provide in message fields

This information is sent to us by email and recorded in our internal client management system as a prospective contact, together with your message and the services you are interested in, so that we can respond to your enquiry and manage any follow-up.

Business Relationship Data: If we enter into a business relationship, we may also collect and process additional information necessary for service delivery, including contact details for your key contacts, project-related communications, meeting notes, records of the time we spend delivering our services, and billing and invoice information. We manage these records in our internal client management system, which also reads customer, invoice and credit note records from our accounting software, QuickBooks Online, on a read-only basis to reconcile the work we deliver with what we have invoiced.

How We Use Your Personal Data

We use your personal data to help us operate and improve our business and services. Specifically, we use it to:

• Understand Website Usage: Monitor how visitors interact with our website to improve user experience and website performance.
• Prevent Spam and Fraud: Protect our site and communications via Google reCAPTCHA. This security measure is essential in ensuring the legitimate operation of our contact forms and operates independently of analytics cookies.
• Respond to Enquiries: Handle your contact form submissions and provide timely, relevant responses.
• Support Business Development: Track enquiries, prepare proposals, maintain records of business interactions, and build strong relationships with clients and contacts in a way that does not involve profiling or automated decision-making.
• Deliver Services: Manage projects and deliver our technology leadership and advisory services when we enter into a business relationship.
• Manage Engagements and Billing: Record the time we spend against the scope agreed with you, and reconcile it with our invoices so that we bill accurately.
• Meet Legal and Regulatory Obligations: Comply with financial, legal, and regulatory requirements applicable to our business.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Legitimate Interest: For responding to enquiries (including contacting you about the enquiry you have submitted), sending relevant information about our services where we have had prior contact or a business relationship (you can opt out at any time), managing business relationships, tracking interactions with our services, maintaining project and engagement records, preventing spam and abuse (via Google reCAPTCHA), and retaining business documentation.
• Contract: For service delivery, recording the time we spend on it, invoicing, and fulfilling obligations under accepted proposals.
• Legal Obligation: For compliance with financial, legal, and regulatory requirements.
• Consent: For analytics cookies and any marketing communications (where applicable).

How We Share Your Personal Data

We do not sell your personal data to third parties. We may share your information with:

Service Providers: We use trusted third-party services to operate our website and business:

• Microsoft: For productivity tooling (including email), document / information storage, hosting (including our website and internal client management system), and website analytics using Microsoft Clarity. Microsoft processes certain analytics data as an independent data controller for the purposes of operating and improving the Clarity service. Analytics only load after you provide consent via our cookie banner.
• Google: For providing reCAPTCHA security on our contact forms. Google processes reCAPTCHA data as our data processor under Google's Cloud Data Processing Addendum. reCAPTCHA loads automatically when a form is present as an essential security measure and operates independently of analytics cookies or consent.
• Intuit: For accounting and invoicing using QuickBooks Online. Intuit processes customer, invoice and payment records as our data processor. Our internal client management system connects to QuickBooks Online on a read-only basis and never changes these records.
• SendGrid: For secure email delivery of contact form submissions.

Other Service Providers: Other third-party providers may be engaged from time to time to support Enable Great’s business operations. In such cases, personal data will only be shared where necessary and subject to appropriate contractual safeguards to ensure compliance with applicable data protection law.

Legal Requirements: We may disclose your information where required by law, regulation, or court order.

Business Transfer: In the unlikely event of a business sale, merger, or transfer of assets, your information may be transferred to the new owner or successor entity. You will be notified of any such transfer where required by law.

International Data Transfers

Some of our service providers (e.g. SendGrid, Microsoft, Google, Intuit) may process your personal data outside the UK.

Where this occurs we ensure appropriate safeguards in line with UK data protection law, including confirmation that the level of protection is not materially lower than that under UK standards. Our internal client management system is hosted on Microsoft Azure in the United Kingdom and Western Europe; data held in the European Economic Area benefits from the UK's adequacy regulations for transfers to the EEA.

These safeguards may include:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the UK authorities
• Certification schemes ensuring appropriate data protection

Cookies and Tracking Technologies

Essential Cookies: We use essential cookies to remember your consent choices relating to website analytics and security. We set and store a 'cookieconsent_status' cookie, alongside browser localStorage to store additional cookie management data (cookieconsent_version and cookieconsent_timestamp). These enable us to automatically prompt for fresh consent when our privacy practices change. The consent banner interface is powered by Osano's cookie consent library.

Analytics Cookies: Microsoft Clarity analytics are only activated if you explicitly consent via our cookie banner. Clarity helps us understand website usage and user‑experience trends, and is configured to mask sensitive content and form fields. If you decline analytics cookies, no analytics scripts will load.

reCAPTCHA: Google reCAPTCHA is used to protect our contact forms from spam and abuse. It is an essential security tool and therefore loads automatically when a form is present, independent of analytics cookies or consent. reCAPTCHA may collect technical information such as your IP address, device characteristics, and interaction patterns for fraud detection. Google processes this data as our data processor under Google's Cloud Data Processing Addendum. These operations are carried out under our legitimate interest in securing our website and communications.

You can control cookie settings through your browser settings. You can also reset your cookie preferences at any time using the "Reset Cookies" link in our website footer. This will clear all stored consent data and reload the page so you can make a fresh choice about cookie usage on this site.

How Long We Keep Your Data

Website Analytics: Microsoft Clarity retains individual session recordings for up to 30 days. Aggregated analytics (such as heatmaps, engagement metrics, and interaction trends) may be retained for longer but do not contain personal data. Session‑level data is automatically deleted once the retention period expires.

Contact Form Data: We retain enquiry information in our internal client management system for up to 3 years from the date of last interaction to manage potential business relationships and comply with our legitimate business interests. This includes contact details and the content of your enquiry.

Client Data: For active business relationships, we retain data, including time and invoice records, for the duration of our engagement plus 7 years to comply with financial and legal record-keeping requirements.

Marketing Communications: Where we send you information about our services, we keep your contact details for this purpose until you opt out or object, or we determine they are no longer needed. If you opt out, we keep a minimal record so that we do not contact you again.

Your Rights

Under UK data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you (Subject Access Request).
• Right of Rectification: Ask us to correct any inaccurate or incomplete personal data.
• Right of Erasure: Request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Right to Restrict Processing: Ask us to suspend the processing of your personal data in certain circumstances.
• Right of Portability: Request a copy of your personal data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw this at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• Secure transmission protocols (HTTPS / SSL)
• Access controls and authentication measures, with access to client records restricted to authorised personnel
• Encryption of the stored credentials that connect our internal systems to our accounting software
• Regular security assessments of our systems and processes

Complaints

If you have concerns about how we handle your personal data, please contact us first using the details below. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

ICO Registration: Enable Great Limited is registered with the Information Commissioner's Office under registration number ZB971217.

Changes to This Policy

We may update this privacy notice from time to time to reflect changes in our practices, services, or legal obligations. Any significant changes will be clearly communicated, and we will seek fresh consent where required. The current version is always available on our website with the revision date shown below.

Contact Us

If you have any questions about this privacy notice, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please get in touch:

Online: Submit an enquiry using our contact form (choose "Something Else" for privacy-related queries)
Post: Enable Great Limited, 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Email: