+44 (0) 7739 117 684
tamsin@skynoteconsulting.co.uk
Menu

Skynote Consulting Privacy Notice

Last updated: July 2026

Skynote Consulting takes the security of data seriously and is focused on protecting privacy. We are both a data controller and a data processor.

1. Skynote Consulting’s Contact Details

2.  Personal Information We Collect

We process personal data and sometimes special category data when providing our services.  Some of our work is anonymised and the data that we process is kept to a minimum.  These are some examples:

  • You might submit your name as you give feedback about a colleague in an appraisal/professional review process. You might be invited to provide detail on the seniority of your position.
  • You might also be invited to give your work e-mail address in advance of a leadership training session.
  • You might be invited by your place of work to complete personality profiling tool Insights Discovery.  In this case you will be asked to complete an online assessment, which will result in a personalised personality profile which Skynote Consulting has access to.

3. How We Get Your Personal Information and Why We Collect It

The personal information we process is provided to us directly by you for one of the following reasons:

  • You have completed a SurveyMonkey questionnaire to give feedback on a work colleague for their appraisal/development review.
  • You would like your Insights Discovery personality profile created.
  • You have contacted us through Skynote Consulting’s website.
  • You are attending a training course delivered by Skynote Consulting through your workplace.
  • You have been offered leadership coaching through your workplace.
  • You have filled out a contact or enquiry form.
  • You have been asked for feedback on the delivery of services provided by Skynote Consulting.

Under the UK GDPR, the lawful basis we rely on for processing this information are:

  • You are able to remove your consent at any time by contacting us.
  • We have a contractual obligation to deliver training, personality profile reports, or coaching.
  • We have a legal obligation: such as HMRC requirements.
  •  We have a legitimate interest to contact you.  

4. Who do we share your personal data with?

We use third parties in conjunction with routine business requirements, accountancy and insurance services.  

  • With professional advisors such as accountants and insurance, although this information will be very limited;
  • In order to conduct checks on you to verify the information you have provided us with where you are being considered for a position or contract with us;
  • In the event of a sale of the company or its assets;
  • With suppliers but only subject to robust contractual protections;
  • If we are legally obliged to do so.

5.  How We Store Your Information

Your information is securely stored using Apple iCloud and Microsoft OneDrive. Data may be stored on servers located outside the UK/EEA (including the United States); where this occurs, transfers are protected by appropriate safeguards under UK GDPR, including standard contractual clauses. Data is encrypted in transit and at rest.

Appraisals/development reviews and retention periods

We have a data retention schedule in place which is regularly reviewed. Your data might be anonymised and used for trends but you will not be recognisable. 

If you have completed an online questionnaire through SurveyMonkey (the survey platform), SurveyMonkey records respondent IP addresses in backend logs and deletes them after 13 months. https://uk.surveymonkey.com/mp/legal/privacy/. 

Skynote Consulting keeps personal information from an appraisal/development review for 12 months. After this time, we securely dispose of or delete your data. 

All information given as feedback for an appraisal/development review is treated in strictest confidence.  Your comments will inform feedback but remain anonymous to the person being appraised and all colleagues.

Insights Discovery

Insights Discovery’s Privacy Policy can be reviewed at https://www.insights.com/general-privacy-notice/

Skynote Consultancy keeps Insights Discovery profiles and ‘team wheels’ for two years.  After this time, we securely dispose of or delete them from our system.

Notes taken during Leadership coaching

Notes taken during Leadership coaching sessions are kept for the duration of a coaching programme plus one year after.  After this time we securely dispose of or delete them from our system.

Notes taken during Leadership training sessions

Notes taken during Leadership training sessions are kept for 12 months.  After this time we securely dispose of or delete them from our system.

6. Your Data Protection Rights

The GDPR provides the following rights for individuals:

Rights What does this mean?
1. The right to be informed You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we are providing you with the information in this Privacy Notice.
2. The right of access You have the right to obtain access to your information. This is so you are aware and can check that we are using your information in accordance with data protection law.
3. The right to rectification You are entitled to have your information corrected if it’s inaccurate or incomplete.
4. The right to erasure This is also known as the right to be forgotten and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right, there are exceptions.
5. The right to restrict processing You have rights to block or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
6. The right to data portability You have rights to obtain and reuse your personal data for your own purposes across different services. This is not a normal scenario for companies of our nature but if you have any questions you can contact us.
7. The right to object to processing You have the right to object to certain types of automated processing or decision making, including processing for direct marketing or where we are relying on our legitimate interests for processing.
8. The right to withdraw consent If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes.

7. Data Subject Access Requests

Under the GDPR you have the right to request a copy of the personal information that we hold about you and to have any inaccuracies corrected or information deleted.  You may need to prove your identity with identification which could be a passport or driving licence.  We will try and verify your identity using personal data that we already have. We will verify your identity, noting how and when we verified it, then we will immediately delete any data that we do not need.

We may send you a form which clarifies what information you need unless it is clear. If you can advise of the specific information that you require, we can process your request more quickly. 

We will provide your personal data within one month of receiving identity verification, subject to any exemptions that we need to adhere to.

We will also explain why we have your personal data, who it could be disclosed to, the categories of data it involves and it will be in a format that you can access easily.  You have the right to clarify and correct the information as necessary.  It can be deleted providing that it is not required for legal or public interest reasons.  If your request is more complex, for example it involves other data subjects and obtaining consent, we can extend our response time to three months, but we will inform you of this.  We may need to anonymise this data or remove relevant details before sending this to you. 

We will not charge for data subject access requests unless they are excessive or manifestly unfounded.  Then we will charge for administrative time only. 

We will respond to your request within one month of you providing information that confirms your identity. You are entitled to all your personal information if we can and are legally able to.

We will respond giving you a copy of your data, why we have it, who it could be disclosed to, the categories of data it involves, and it will be in a format that you can access easily.  You have the right to clarify and correct the information as necessary.  It can be deleted providing that it is not required for legal or public interest reasons.  If your request is more complex, for example it involves other data subjects and we need their consent to release the relevant information we can extend our response time to three months, but we will inform you of this.  If they do not give their consent, we will anonymise this data or remove the relevant detail before sending this to you.  We will not charge for data subject access requests unless they are excessive or manifestly unfounded.  Then we will charge for administrative time only. 

8. Data Breaches

We have procedures in place to deal with any suspected personal data breach and will notify you and any supervisory body of a breach if we are legally required to.

9. Complaints

If you have any concerns about our use of your personal information, you can make a complaint to us directly at tamsin@skynoteconsulting.co.uk

We have a complaints process in place which ensures that we respond to complaints promptly.  We will answer complaints within 30 days and will ensure that this process is accessible to all, complaints are acknowledged with clear communication. We will keep records of all complaints and review our processes regularly to ensure that improvements are made.  

Only when these complaints cannot be resolved internally, are they escalated to the ICO.  Skynote’s ICO security number is CSN9209156.

  • ICO Helpline Number: 0303 123 1113
  • ICO Website: Information Commissioner’s Office. https://ico.org.uk/global/contact-us/contact-us-public/public-advice/