1. Who we are

Fernglen Advisory is a remuneration consultancy operating under the website www.fernglen.co.uk.

For the purposes of UK data protection law, Fernglen Advisory is the data controller in respect ofpersonal data collected through this website.

If you have any questions about how we handle your personal data, you can contact us at: info@fernglen.co.uk

2. What personal data we collect

When you submit an enquiry through the contact form on our website, we collect the following personal data:

• Your name

• Your email address

• Your organisation or company name

• Any additional information you choose to include in your message

We do not collect any special category data (such as health information, financial data, or any other sensitive personal data) through this website.

3. Why we collect it and our legal basis

We collect this information solely to respond to your enquiry. Our legal basis for processing this data is our legitimate interest in responding to business enquiries and providing the professional services you have requested information about.

We will not use your details for marketing communications without your separate consent. If you become a client, any further data processing will be governed by a separate engagement agreement.

4. How long we keep your data

We retain enquiry data for up to two years from the date of your initial contact. After this period, your data will be securely deleted unless we have entered into a client relationship with you, in which case different retention terms will apply.

5. Who we share your data with

We do not sell or share your personal data with third parties for marketing purposes. Your data may be accessible to the following categories of service providers who help us operate this website:

• Squarespace Inc. – our website and hosting provider, who processes contact form data on our behalf (see their privacy policy at squarespace.com/privacy)

• Any email service provider used to receive and manage enquiry emails

All third-party processors are required to handle your data in compliance with applicable data protection law.

6. International transfers

Squarespace, our website hosting provider, is based in the United States. Where your data is transferred outside the United Kingdom, appropriate safeguards are in place in accordance with UK GDPR requirements. Please refer to Squarespace’s privacy policy for further details of the safeguards they apply.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access – to request a copy of the personal data we hold about you

• Right to rectification – to ask us to correct inaccurate or incomplete data

• Right to erasure – to request that we delete your personal data in certain circumstances

• Right to restriction – to ask us to limit how we use your data while a concern is resolved

• Right to object – to object to processing based on our legitimate interests

• Right to data portability – to receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at info@fernglen.co.uk. We will respond to all requests within one calendar month.

8. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection matters.

ICO website: ico.org.uk — Helpline: 0303 123 1113

9. Changes to this policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated ‘last updated’ date. We encourage you to review this policy periodically.