Privacy Policy for thaver.co.uk

Effective Date: 16 October 2025

This Privacy Policy explains how thaver.co.uk (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal data when you visit and use our website. We’re committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and all relevant UK data protection laws.

1. Who We Are (Data Controller)

The Data Controller responsible for your personal data is OMThaver Consulting Ltd

Website: thaver.co.uk

Contact Details for Privacy Queries: hello@thaver.co.uk

Postal Address: OMThaver Consulting Ltd, 192 High Rd, Romford RM6 6LU

2. The Personal Data We Collect

We collect different types of personal data depending on how you interact with our site:

• Identity Data: This includes your first name, last name, job title, and company name.
• Contact Data: This includes your email address, phone number, and postal address.
• Technical Data: This includes your Internet Protocol (IP) address, browser type, operating system, and information about the technology you use to access our website.
• Usage Data: This includes information about how you use our website, such as the pages you visit, the links you click, and any content you download.
• Marketing and Communications Data: This includes your preferences for receiving marketing from us and your communication preferences.

3. How We Collect Your Data

Data You Provide Directly

You provide us with data through direct interactions when you fill out forms on our website or correspond with us via email or post.

• Contact Form: When you use our contact form, we collect your Identity and Contact Data solely to respond to your specific enquiry and provide the information or service you requested.
• Subscription Form: When you sign up for our newsletter or marketing updates, we collect your Contact Data (usually email address) based on your explicit consent.
• Gated Content Forms: When you fill out a form to download an e-book, whitepaper, or report, we collect your Identity and Contact Data to deliver the content and for follow-up marketing of related services. You will always be given a clear option to opt out of future marketing.

Automated Technologies and Third Parties

As you browse our website, we automatically collect Technical and Usage Data via cookies and similar technologies. We also receive data from third-party analytics providers like Google.

4. The Purposes and Lawful Basis for Processing

We will only process your personal data when we have a lawful basis under the GDPR.

1. To Respond to Enquiries (Contact Form): We process your Identity and Contact Data based on our Legitimate Interest in running our business, specifically by responding to customer and prospect questions efficiently and effectively.
2. To Send Marketing (Subscription Form): We process your Contact Data to send you updates and newsletters only when we have your Consent. You can withdraw this consent at any time.
3. To Deliver Content and Conduct Marketing (Gated Content Forms): We process your data to fulfil the content request, relying on your Consent for the delivery. We also rely on our Legitimate Interest to market related services to you, provided this doesn’t infringe on your rights.
4. Website Analytics and Performance: We process Technical and Usage Data using tools like Google Analytics and Site Kit based on our Legitimate Interest in continually improving our website and understanding our audience. Where required, we also rely on your Consent via our cookie banner.

5. Use of Third-Party Tools and Data Sharing

We use third-party tools that process personal data on our behalf. These tools are our Data Processors, and we ensure they are GDPR-compliant.

• Google Analytics and Site Kit: Used to collect and analyse Technical and Usage Data. This helps us measure website traffic and user engagement. Your data is anonymised where possible.
• HubSpot CRM: Used for managing customer information, tracking website interactions (if you’ve filled out a form), and sending our email marketing communications.

International Data Transfers

Your personal data may be transferred to and stored outside the UK and European Economic Area (EEA), particularly to the USA, as many of our service providers (like Google and HubSpot) are based there. When this happens, we ensure a high level of data protection is maintained by using legal mechanisms like Standard Contractual Clauses (SCCs).

Data Retention

We only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements.

6. Your Legal Rights (GDPR Rights)

Under data protection law, you have specific rights regarding your personal data. You can exercise any of these rights by contacting us at hello@thaver.co.uk.

Your rights include:

• The Right to Be Informed: To know how your data is being used (the purpose of this policy).
• The Right of Access: To request a copy of the personal data we hold about you (a Data Subject Access Request – DSAR).
• The Right to Rectification: To ask us to correct data you believe is inaccurate or incomplete.
• The Right to Erasure: To ask us to delete your personal data (the Right to be Forgotten).
• The Right to Restrict Processing: To ask us to limit the way we use your personal data.
• The Right to Object: To object to the processing of your personal data where we rely on a legitimate interest.
• The Right to Data Portability: To request that we transfer your data to another organisation or directly to you.
• The Right to Withdraw Consent: To withdraw your consent at any time where we rely on it for processing.

7. Complaints

If you have concerns about our use of your personal data, please contact us first so we can try to resolve the issue. If you remain dissatisfied, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

8. Changes to this Privacy Policy

We may update this policy periodically. The latest version will always be posted on our website, and we will update the “Effective Date” at the top of the policy.