Privacy Policy

Covalent Insights Ltd is the data controller responsible for your personal information. We are a management consultancy providing advisory, delivery and coaching services to organisations across the UK and internationally.

If you have any questions about how we use your personal data, or wish to exercise any of your rights, please contact us at the email address above.

We collect personal information in the following ways:

Information you give us directly

• Your name, email address, phone number, and company name when you submit our contact form
• Your name, email address, and any information you provide when booking a discovery call through our scheduling system
• Any messages, questions or details about your project or requirements you choose to include in a form submission
• Information you share with us directly by email or through LinkedIn

Information collected automatically

• Your IP address and approximate geographic location
• Browser type and version, operating system, and device type
• Pages you visit on our website, how long you spend on each page, and how you navigate between them
• Referring website or source (e.g. how you found us)
• Date and time of your visit

We do not collect sensitive personal data (such as health information, financial details, or information about ethnicity, religion or political views) through our website. Please do not include such information in any form submission.

We use the information we collect for the following purposes:

• To respond to your enquiry — when you submit a contact form or book a call, we use your details to get back to you
• To deliver our services — if we enter into an engagement, we use your contact details to communicate, deliver work, and manage our relationship with you
• To manage bookings — your information is used by our scheduling system to confirm, remind and manage discovery call appointments
• To improve our website — anonymised usage data helps us understand which content is useful and how to improve the site
• To send relevant follow-up communications — with your permission, or where we have a legitimate interest, we may follow up on your enquiry or share information relevant to the services you asked about
• To comply with legal obligations — we may need to retain certain records for accounting, tax or legal compliance purposes

We will not use your information to send unsolicited marketing emails. Any marketing communications will be clearly identified as such and will include an easy way to opt out.

Under UK GDPR, we must have a valid legal basis for processing your personal data. Depending on how and why we use your information, the legal basis will be one of the following:

• Legitimate interests — responding to an enquiry you initiated, following up on a contact form submission, and analysing anonymised website usage are all activities we have a legitimate business interest in carrying out. We have considered these interests against your rights and do not believe they override your privacy.
• Contract — where we are providing services to you under an agreement, processing your information is necessary to fulfil that contract.
• Legal obligation — where we are required by law to retain or process your data (for example, financial records under UK tax law).
• Consent — where we ask for your permission before using your data for a specific purpose (for example, adding you to a mailing list). You may withdraw consent at any time by contacting us.

We do not sell, rent or trade your personal information. We share it only with trusted third-party service providers who help us operate our website and business, and only to the extent necessary for those purposes.

Our current third-party service providers include:

• GoHighLevel (HighLevel Inc.) — our CRM and booking platform. Contact form submissions and discovery call bookings are processed and stored through GoHighLevel. Their privacy policy is available at gohighlevel.com/privacy-policy
• LeadConnector / MsgSndr — the form embed technology that powers our contact forms on this website, provided as part of the GoHighLevel platform
• LinkedIn — we maintain a business presence on LinkedIn. Any information shared via LinkedIn is subject to LinkedIn's own privacy policy
• Website hosting and infrastructure providers — the platforms used to host this website may process limited technical data (such as IP addresses) as part of normal infrastructure operation

All third-party providers we use are required to handle your data securely and in line with applicable data protection law. Where providers are based outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR.

We may also disclose your information if required to do so by law, or to protect the rights, property or safety of Covalent Insights Ltd, our clients or others.

We keep your personal information only for as long as necessary for the purposes it was collected, or as required by law. Our standard retention periods are:

• Contact form submissions and enquiries — retained for 24 months from the date of submission, or longer if an ongoing business relationship develops from the enquiry
• Discovery call bookings — retained for 12 months from the date of the booking
• Client engagement records — retained for 7 years from the end of the engagement in line with UK legal and tax obligations
• Website analytics data — anonymised usage data may be retained indefinitely; any personally identifiable technical data (such as IP logs) is deleted within 12 months

When your data is no longer required, we delete it securely. If you would like us to delete your information sooner, please contact us at [email protected].

Under UK data protection law you have the following rights in relation to your personal data:

Right of access

You can ask us for a copy of the personal data we hold about you at any time.

Right to rectification

You can ask us to correct personal data that is inaccurate or incomplete.

Right to erasure

You can ask us to delete your personal data where there is no lawful reason to continue holding it.

Right to restrict processing

You can ask us to pause the processing of your data in certain circumstances.

Right to data portability

You can ask us to provide your data in a commonly used, machine-readable format.

Right to object

You can object to processing based on legitimate interests, including direct marketing.

Right to withdraw consent

Where processing is based on consent, you can withdraw it at any time without affecting prior processing.

Right to complain

You have the right to lodge a complaint with the ICO if you believe we have misused your data.

To exercise any of these rights, contact us at [email protected]. We will respond within one month. There is no charge for making a request.

Our website uses cookies — small text files stored on your device — to help the site function and to understand how it is used. We use the following types of cookies:

• Strictly necessary cookies — essential for the website to operate. These cannot be switched off as they are required for basic functionality such as page navigation and form submission.
• Analytics cookies — help us understand how visitors use the site by collecting anonymised information about pages visited, time spent, and navigation paths. We use this data only to improve the website.
• Third-party cookies — our contact and booking forms (provided by GoHighLevel / LeadConnector) may set their own cookies as part of form loading and tracking. These are governed by GoHighLevel's own cookie and privacy policies.

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, although doing so may affect the functionality of this website. For guidance on managing cookies, visit aboutcookies.org. See our full Cookie Policy for more detail.

Our website may contain links to external websites — including LinkedIn and our scheduling platform. Once you leave our site, this privacy policy no longer applies. We encourage you to read the privacy policies of any external sites you visit, as we have no control over how third parties handle your data and accept no responsibility for their practices.

We may update this privacy policy from time to time to reflect changes in our practices, the services we offer, or legal requirements. When we make significant changes, we will update the "last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after any update constitutes acceptance of the revised policy.

If you have any questions, concerns or requests relating to this privacy policy or the way we handle your personal data, please get in touch:

We aim to respond to all data-related requests within 30 days. If your request is complex or you have made multiple requests, we may extend this by a further two months — in which case we will inform you within the initial 30-day period.