Privacy Notice

At Enable Great Limited, protecting your privacy and responsibly handling your personal data in line with UK data protection law is a priority. This includes the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations (PECR)

Who We Are

Enable Great Limited (Company No. 16488176) is the data controller for the personal information we collect and process. We are registered in England and Wales with our registered office at 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

What Personal Data We Collect

Website Analytics: When you visit our website and consent to analytics cookies, we use Microsoft Clarity to help us understand how visitors interact with our pages. Clarity collects technical and usage information such as device type, browser details, interaction patterns (including clicks, scroll behaviour, and navigation), and approximate geographic region. Clarity does not retain full IP addresses, and we configure it to mask form fields and sensitive on‑page content. Analytics scripts load only after you provide consent via our cookie banner. Microsoft acts as an independent data controller for certain analytics data collected through Clarity, as described in the Microsoft Privacy Statement.

Contact Forms and Website Download Requests: We use Google reCAPTCHA to protect our forms and systems from spam and abuse. reCAPTCHA is an essential security feature and loads automatically when a form is present. Google processes technical information such as your IP address and browser characteristics for fraud detection on our behalf, as our data processor under Google's Cloud Data Processing Addendum. When you complete our contact forms or request downloads, we collect the following personal details:

• Your name and job title (where provided)
• Company name and contact details (email address, phone number where provided)
• The services you're interested in or resources you've requested
• Any additional information you choose to provide in message fields

This information is stored in our customer relationship management (CRM) system to manage enquiries, track business interactions, and enable appropriate follow-up about our services.

Business Relationship Data: If we enter into a business relationship, we may also collect and process additional information necessary for service delivery, including project-related communications, meeting notes, and billing information.

How We Use Your Personal Data

We use your personal data to help us operate and improve our business and services. Specifically, we use it to:

• Understand Website Usage: Monitor how visitors interact with our website to improve user experience and website performance.
• Prevent Spam and Fraud: Protect our site and communications via Google reCAPTCHA. This security measure is essential in ensuring the legitimate operation of our contact forms and operates independently of analytics cookies.
• Respond to Enquiries and Fulfill Requests: Handle your contact form submissions, process website download requests, and provide timely, relevant responses.
• Support Business Development: Track enquiries and website download requests, prepare proposals, maintain records of business interactions, and build strong relationships with clients and contacts in a way that does not involve profiling or automated decision-making.
• Deliver Services: Manage projects and deliver our technology leadership and advisory services when we enter into a business relationship.
• Meet Legal and Regulatory Obligations: Comply with financial, legal, and regulatory requirements applicable to our business.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Legitimate Interest: For responding to enquiries, processing website download requests, managing business relationships, tracking interactions with our services and content, maintaining project records, preventing spam and abuse (via Google reCAPTCHA), and retaining business documentation.
• Contract: For service delivery and fulfilling obligations under accepted proposals.
• Legal Obligation: For compliance with financial, legal, and regulatory requirements.
• Consent: For analytics cookies and any marketing communications (where applicable).

How We Share Your Personal Data

We do not sell your personal data to third parties. We may share your information with:

Service Providers: We use trusted third-party services to operate our website and business:

• Microsoft: For productivity tooling, document / information storage, hosting, and website analytics using Microsoft Clarity. Microsoft processes certain analytics data as an independent data controller for the purposes of operating and improving the Clarity service. Analytics only load after you provide consent via our cookie banner.
• Google: For providing reCAPTCHA security on our contact forms. Google processes reCAPTCHA data as our data processor under Google's Cloud Data Processing Addendum. reCAPTCHA loads automatically when a form is present as an essential security measure and operates independently of analytics cookies or consent.
• HubSpot: For customer relationship management (CRM), storing contact information, tracking business interactions and website download requests, and managing marketing subscriptions (where consent is provided).
• SendGrid: For secure email delivery of contact form submissions and download links.

Other Service Providers: Other third-party providers may be engaged from time to time to support Enable Great’s business operations. In such cases, personal data will only be shared where necessary and subject to appropriate contractual safeguards to ensure compliance with applicable data protection law.

Legal Requirements: We may disclose your information where required by law, regulation, or court order.

Business Transfer: In the unlikely event of a business sale, merger, or transfer of assets, your information may be transferred to the new owner or successor entity. You will be notified of any such transfer where required by law.

International Data Transfers

Some of our service providers (e.g. SendGrid, Microsoft, Google) may process your personal data outside the UK.

Where this occurs we ensure appropriate safeguards in line with UK data protection law, including confirmation that the level of protection is not materially lower than that under UK standards. Our HubSpot CRM is hosted in the EU and benefits from the UK's adequacy decision for EU data transfers.

These safeguards may include:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the UK authorities
• Certification schemes ensuring appropriate data protection

Cookies and Tracking Technologies

Essential Cookies: We use essential cookies to remember your consent choices relating to website analytics and security. We set and store a 'cookieconsent_status' cookie, alongside browser localStorage to store additional cookie management data (cookieconsent_version and cookieconsent_timestamp). These enable us to automatically prompt for fresh consent when our privacy practices change. The consent banner interface is powered by Osano's cookie consent library.

Analytics Cookies: Microsoft Clarity analytics are only activated if you explicitly consent via our cookie banner. Clarity helps us understand website usage and user‑experience trends, and is configured to mask sensitive content and form fields. If you decline analytics cookies, no analytics scripts will load.

reCAPTCHA: Google reCAPTCHA is used to protect our contact forms from spam and abuse. It is an essential security tool and therefore loads automatically when a form is present, independent of analytics cookies or consent. reCAPTCHA may collect technical information such as your IP address, device characteristics, and interaction patterns for fraud detection. Google processes this data as our data processor under Google's Cloud Data Processing Addendum. These operations are carried out under our legitimate interest in securing our website and communications.

You can control cookie settings through your browser settings. You can also reset your cookie preferences at any time using the "Reset Cookies" link in our website footer. This will clear all stored consent data and reload the page so you can make a fresh choice about cookie usage on this site.

How Long We Keep Your Data

Website Analytics: Microsoft Clarity retains individual session recordings for up to 30 days. Aggregated analytics (such as heatmaps, engagement metrics, and interaction trends) may be retained for longer but do not contain personal data. Session‑level data is automatically deleted once the retention period expires.

Contact Form and Website Download Request Data: We retain enquiry and website download request information in our CRM for up to 3 years from the date of last interaction to manage potential business relationships and comply with our legitimate business interests. This includes contact details and records of which resources you've requested.

Client Data: For active business relationships, we retain data for the duration of our engagement plus 7 years to comply with financial and legal record-keeping requirements.

Marketing Communications: Where consent is given for marketing communications, we retain this until you withdraw consent or we determine the data is no longer needed.

Your Rights

Under UK data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you (Subject Access Request).
• Right of Rectification: Ask us to correct any inaccurate or incomplete personal data.
• Right of Erasure: Request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Right to Restrict Processing: Ask us to suspend the processing of your personal data in certain circumstances.
• Right of Portability: Request a copy of your personal data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw this at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• Secure transmission protocols (HTTPS / SSL)
• Access controls and authentication measures
• Regular security assessments of our systems and processes

Complaints

If you have concerns about how we handle your personal data, please contact us first using the details below. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk

ICO Registration: Enable Great Limited is registered with the Information Commissioner's Office under registration number ZB971217.

Changes to This Policy

We may update this privacy notice from time to time to reflect changes in our practices, services, or legal obligations. Any significant changes will be clearly communicated, and we will seek fresh consent where required. The current version is always available on our website with the revision date shown below.

Contact Us

If you have any questions about this privacy notice, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please get in touch:

Online: Submit an enquiry using our contact form (choose "Something Else" for privacy-related queries)
Post: Enable Great Limited, 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Email: