Privacy Policy
This notice explains how Applied Behaviour Change Ltd (ABC) collects and uses personal data when you visit our website, contact us, subscribe to communications or interact with us as a prospective/client/supplier business contact. Project-specific research or client processing may be covered by a separate privacy notice or by the relevant client/controller's privacy information.
1. Who we are
Applied Behaviour Change Ltd is a behavioural science consultancy registered in England and Wales (Company No. 14132730), registered address: 51 Northumberland Road, Leamington Spa, CV32 6HF. Contact: info@appliedbehaviourchange.com.
For the activities described in this notice, ABC is generally the data controller. For some client projects ABC acts as processor on the client's instructions; in those circumstances the client/controller determines the purposes of processing and its privacy notice/project information should be read alongside any information ABC provides.
2. Personal data we collect
· Information you provide: name, email, telephone (if provided), organisation, role, message/correspondence, enquiry/proposal information and newsletter preferences.
· Website/form data: information submitted through Squarespace forms and related form metadata.
· Website analytics: IP address, device/browser information, pages/actions, referring URL and cookie/analytics identifiers where enabled.
· Client/supplier business contact information needed to manage contracts, projects, invoices, meetings and professional relationships.
3.Special category data
ABC does not intentionally request special-category data through ordinary website enquiry forms. However, ABC may process special-category information (for example health-related information) in research, evaluation or consultancy projects where this is necessary and lawful. Where ABC is controller for such processing, it will identify the relevant Article 6 lawful basis and Article 9 condition and provide appropriate project-specific privacy information. Where ABC is processor, the client/controller is responsible for determining the lawful basis and transparency information, with ABC acting on documented instructions.
3. How we use your personal data
We use your data to:
Respond to enquiries
Provide consultancy services
Manage and improve our website
Keep records of communications
Send newsletters if you have chosen to subscribe
Comply with legal obligations
We do not use your data for automated decision making or profiling.
4. Our legal bases for processing
Under UK GDPR we rely on the following legal bases:
Contract - when we need the data to provide services or respond to enquiries
Legitimate interests - for running and improving our website, understanding site usage and communicating with clients
Consent - for sending newsletters and using non essential cookies
Legal obligation - for accounting or regulatory requirements
5. How long we keep your data
We keep personal data only for as long as needed for the purpose collected.
Typical retention periods:
Enquiry form submissions: up to 24 months
Client project records: 6 years for accounting purposes
Newsletter mailing list: until you unsubscribe
Google Analytics data: retained according to our settings in Google Analytics
We securely delete data when no longer required.
6. Sharing your data
We only share your data with trusted third parties that help us operate our business.
These include:
Squarespace - website hosting and form storage
Google Analytics - website analytics
Email service providers (if we launch a newsletter)
All third parties must keep your data secure and comply with data protection law.
We do not sell your data.
7. International transfers
Squarespace and Google Analytics store and process data outside the UK, including the United States. These transfers are supported by standard contractual clauses or similar safeguards required under UK GDPR.
8. Your rights
Under UK GDPR, you have the right to:
Access your personal data
Correct inaccurate data
Request deletion
Object to processing
Restrict processing
Move your data (data portability)
Withdraw consent at any time
Complain to the Information Commissioners Office (ICO)
ICO website: www.ico.org.uk
To exercise your rights, contact us at [info@appliedbehaviourchange.com].
9. Security
We take appropriate technical and organisational steps to keep your data secure, including secure servers, access controls and encryption provided by our third party providers.
10. Updates to this policy
We may update this policy from time to time. The updated version will always be available on this page.
Applied Behaviour Change Ltd
Registered in England and Wales, Company No. 14132730
Registered address: 51 Northumberland Road, Leamington Spa, CV32 6HF
Email: info@appliedbehaviourchange.com
Last updated: 17/08/2026