Privacy Policy
This privacy policy explains how Applied Behaviour Change Ltd collects, uses and protects your personal data when you visit our website or interact with us.
1. Who we are
We are a behavioural science consultancy based in the UK. For data protection law, we are the data controller for the personal data we process.
2. Personal data we collect
We collect only basic information that you choose to provide.
Data you give us directly
Name
Email address
Phone number (if provided)
Organisation name and role (if provided)
Message content
Newsletter sign up data (if you subscribe)
This information is collected through Squarespace forms and sent to us by email. Squarespace stores form submissions on their platform until we delete them.
Data collected automatically
When you visit our website, Squarespace and Google Analytics collect:
IP address
Device and browser type
Pages viewed and actions taken on the site
Referring URL
This helps us understand how visitors use the site.
We do not collect special category data
We do not collect health data, ethnicity data, political opinions, religious beliefs or any other special category data through our website or services.
3. How we use your personal data
We use your data to:
Respond to enquiries
Provide consultancy services
Manage and improve our website
Keep records of communications
Send newsletters if you have chosen to subscribe
Comply with legal obligations
We do not use your data for automated decision making or profiling.
4. Our legal bases for processing
Under UK GDPR we rely on the following legal bases:
Contract - when we need the data to provide services or respond to enquiries
Legitimate interests - for running and improving our website, understanding site usage and communicating with clients
Consent - for sending newsletters and using non essential cookies
Legal obligation - for accounting or regulatory requirements
5. How long we keep your data
We keep personal data only for as long as needed for the purpose collected.
Typical retention periods:
Enquiry form submissions: up to 24 months
Client project records: 6 years for accounting purposes
Newsletter mailing list: until you unsubscribe
Google Analytics data: retained according to our settings in Google Analytics
We securely delete data when no longer required.
6. Sharing your data
We only share your data with trusted third parties that help us operate our business.
These include:
Squarespace - website hosting and form storage
Google Analytics - website analytics
Email service providers (if we launch a newsletter)
All third parties must keep your data secure and comply with data protection law.
We do not sell your data.
7. International transfers
Squarespace and Google Analytics store and process data outside the UK, including the United States. These transfers are supported by standard contractual clauses or similar safeguards required under UK GDPR.
8. Your rights
Under UK GDPR, you have the right to:
Access your personal data
Correct inaccurate data
Request deletion
Object to processing
Restrict processing
Move your data (data portability)
Withdraw consent at any time
Complain to the Information Commissioners Office (ICO)
ICO website: www.ico.org.uk
To exercise your rights, contact us at [add contact email].
9. Security
We take appropriate technical and organisational steps to keep your data secure, including secure servers, access controls and encryption provided by our third party providers.
10. Updates to this policy
We may update this policy from time to time. The updated version will always be available on this page.
Applied Behaviour Change Ltd
Registered in England and Wales, Company No. 14132730
Registered address: 51 Northumberland Road, Leamington Spa, CV32 6HF
Email: info@appliedbehaviourchange.com
Last updated: 04/12/2025