Privacy Notice
Last updated: 22 October 2026
Who we are
Clark Strategic Ltd is an independent consultancy specialising in sustainability and resilience across the health sector.
We are the controller of the personal information covered by this notice. This means we decide why and how that information is used.
Company number: 15695744
Registered office: 37 Hanover Terrace, Brighton, BN2 9SN, United Kingdom
Email: hello@clarkstrategic.co.uk
This notice covers our website, business enquiries, professional communications and client relationships. Where an assignment involves additional uses of personal information, we will provide further information as appropriate.
What information we collect
Depending on your interaction with us, we may collect and use:
Names, professional contact details, correspondence addresses, organisations and job roles.
Enquiries, correspondence, proposals and records of meetings, decisions and agreed actions.
Relevant service history, client records and financial transaction information.
Professional profile information, relevant professional interests and marketing preferences.
Audio or video recordings of meetings or workshops, where recording forms part of an assignment.
Website usage and technical information, such as pages visited, referral sources, IP addresses, browser types and device information.
Our website forms are intended for business enquiries. Please do not submit patient information or other sensitive personal information through them.
Where information comes from
We obtain information directly from you when you contact us, participate in meetings or work with us.
We may also receive professional information from your organisation, colleagues, clients or people making introductions. For relevant business development, we may obtain professional contact and role information from publicly available sources, such as organisational websites and professional networking platforms.
Technical and usage information is collected automatically when you visit our website. Optional analytics cookies are subject to your cookie choices.
Why we use information and our lawful bases
Providing consultancy services
We use professional contact details, relevant correspondence and assignment records to understand requirements, prepare proposals, coordinate work, deliver services and maintain accurate records.
Our lawful basis is legitimate interests: managing our consultancy business and providing effective services to client organisations. This also benefits our clients through clear communication, continuity and accountable delivery.
We limit information to what is relevant, avoid identifying individual contributions where an unattributed summary is sufficient, and consider people’s reasonable expectations and privacy interests.
Where we record a meeting or workshop, we explain the purpose and intended use beforehand. We consider whether written notes would meet the need with less impact on participants.
Information updates and marketing
We use relevant professional contact and profile information to communicate about our services, insights and opportunities relating to sustainable and resilient healthcare.
Where permitted by electronic marketing rules, we rely on legitimate interests in developing our business and reaching organisations that may benefit from our expertise. We consider the relevance of each communication, the source of the information and the recipient’s reasonable expectations.
Where consent is required, we obtain it before sending marketing.
You can object to direct marketing at any time. We will stop sending it to you. To opt out, reply to the communication or email hello@clarkstrategic.co.uk.
Submitting a website enquiry does not subscribe you to a newsletter.
Website operation and analytics
We use technical information to operate, maintain and protect the website, relying on our legitimate interest in providing a functioning and secure service.
With your consent, we use optional analytics cookies to understand website use and improve its content and navigation. You can withdraw consent through the website’s cookie preferences control.
Further information is available in our Cookie policy.
Legal requirements
We use and retain relevant information where necessary to meet legal obligations, including accounting, tax and statutory data protection requirements.
Our lawful basis for these activities is legal obligation.
Enquiries, complaints and claims
We use contact details, correspondence and relevant service or payment records to answer enquiries, investigate complaints, resolve disputes and establish, exercise or defend legal claims.
We rely on legitimate interests in understanding the facts, responding fairly and protecting the rights of our business and others. We limit access and disclosure to what is necessary.
Where processing is required to fulfil a statutory duty, including handling data protection complaints, we rely on legal obligation.
Who we share information with
We use service providers that process personal information on our behalf:
Squarespace Ireland Limited: website hosting and online enquiry forms.
Google Cloud EMEA Limited, providing Google Workspace: business email, communications and related cloud services.
FreeAgent Central Limited: accounting, invoicing and bookkeeping.
These providers may use authorised subprocessors to deliver their services.
Where necessary, we may also share relevant information with accountants, legal or other professional advisers, insurers and insurance intermediaries, or organisations to which disclosure is legally required, such as HMRC.
We do not sell personal information.
Information processed outside the UK
Our providers and their authorised subprocessors may process personal information outside the UK.
Squarespace Ireland Limited and Google Cloud EMEA Limited are based in Ireland. Transfers from the UK to Ireland are covered by UK adequacy regulations.
Squarespace Ireland uses Squarespace, Inc. in the United States. Google Workspace uses Google LLC and other authorised subprocessors. For covered transfers to their US entities, Squarespace and Google rely on the UK Extension to the EU–US Data Privacy Framework. Their processing terms also provide contractual safeguards for relevant transfers not covered by that framework.
FreeAgent is based in the UK and hosts customer information in Ireland. Its published subprocessor list also identifies processing in the United States and other countries, including services provided by Amazon Web Services. FreeAgent’s processing terms permit overseas processing where covered by adequacy arrangements or another valid transfer mechanism, including Standard Contractual Clauses with the UK Addendum.
The applicable protection depends on the recipient and destination. A provider’s location in Ireland does not mean all of its processing takes place there.
Further information is available in the providers’ published arrangements:
You can contact us for further information about relevant transfers or to request details of the applicable safeguards.
How long we keep information
Enquiries
We normally retain enquiries that do not lead to an assignment or an ongoing business relationship for 12 months after the last meaningful contact, then delete them.
Client services
We retain relevant information while an assignment or business relationship is active. Afterwards, we review the records and delete information no longer needed.
We may retain core agreements, deliverables and relevant correspondence for up to six years after an assignment ends where necessary to demonstrate what was agreed and delivered or address potential claims. Contractual requirements or an ongoing dispute may justify a different period.
Meeting recordings are retained only as long as needed for their stated purpose. Where their purpose is to produce an accurate written record, we delete them once that record has been prepared and checked.
Marketing
We review marketing contacts annually. We normally remove contacts after two years without meaningful interaction unless an ongoing relationship or another documented reason justifies continued retention.
When someone objects to marketing, we retain the minimum information needed to record and honour that objection for as long as we continue the relevant marketing activity.
Accounting and legal records
We retain accounting and tax records containing personal information for six years from the end of the company financial year they relate to, or longer where legally required.
Complaints and claims
We normally retain routine complaint correspondence for 12 months after resolution. For significant disputes or legal claims, we determine retention according to the nature of the matter, applicable legal time limits and professional advice.
Website information
Cookie lifetimes are explained in our Cookie policy. We retain other identifiable website information only as long as needed for its operational, security or analytical purpose, taking account of the provider’s retention arrangements.
When information is no longer needed, we delete or anonymise it.
Keeping information secure
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure. Access is limited to those who need it for the relevant purpose.
Your data protection rights
Depending on the circumstances and our lawful basis, you may have the right to:
Obtain a copy of your personal information and information about its use.
Have inaccurate or incomplete information corrected.
Request deletion or restriction of processing.
Object to processing based on legitimate interests.
Receive information you provided in a portable format, where that right applies.
Withdraw consent where we rely on it.
Your right to object to direct marketing is absolute.
For other processing based on legitimate interests, we will consider your objection and stop unless there are overriding lawful grounds to continue.
To exercise your rights, email hello@clarkstrategic.co.uk. We may need information to confirm your identity. We normally respond within one calendar month, subject to any extensions or adjustments permitted by law.
Questions and complaints
If you have concerns about our use of your information, you can complain by:
Email: hello@clarkstrategic.co.uk
Post: Clark Strategic Ltd, 37 Hanover Terrace, Brighton, BN2 9SN, United Kingdom
We will acknowledge a data protection complaint within 30 days, investigate it without undue delay, keep you informed as appropriate and explain the outcome.
You also have the right to complain to the Information Commissioner’s Office:
ICO Head Office
4th Floor, No.3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL
Telephone: 0303 123 1113
Website: Make a complaint to the ICO
Changes to this policy
We will update this policy when our information-handling arrangements change. The date at the top identifies the latest revision.