1. Who We Are

This website is operated by Invictus Care Compliance Ltd trading as Invictus Consultancy, a UK healthcare business consultancy providing CQC and Ofsted registration support, regulatory compliance, business establishment, strategic advisory, growth and digital services.

Invictus Care Compliance Ltd is the data controller responsible for personal information collected through this website.

Our registered office address is 604, Jigger Mast House, Mast Quay, London, SE18 5NH, United Kingdom.

For privacy enquiries, contact info@invictusconsultancy.co.uk.

2. Information We Collect

When you contact Invictus Consultancy Ltd with Invictus Care Compliance Ltd trading as Invictus Consultancy through our website, enquiry forms, email or telephone, we may collect your name, email address, telephone number, organisation name, the service you are interested in, and information you provide in your enquiry.

We may also collect limited technical information when you visit our website, such as your IP address, browser type, device information and website usage data, depending on the technologies and settings in use.

Please do not include confidential patient records, sensitive personal information or unnecessary special category personal data in a general website enquiry.

Our enquiry form asks for your name, organisation, email address, service of interest and enquiry details. A telephone number may be provided voluntarily. The required fields help us identify and respond to your enquiry.

3. How We Use Your Information

We use personal information to respond to enquiries, provide information about our consultancy services, prepare proposals, communicate with prospective and existing clients, and deliver services where we have been instructed to do so.

We may also use information to administer our business, maintain appropriate records, improve our website and services, protect our systems, and comply with legal or regulatory obligations.

We do not sell personal information to third parties. We will only send optional marketing communications where we have an appropriate lawful basis and will provide a way to opt out where required.

4. Lawful Bases for Processing

Under UK data protection law, we process personal information only where we have a lawful basis to do so.

Legitimate interests: To respond to business enquiries, communicate with prospective clients, administer our services, maintain business relationships and protect our website and systems, where those interests are not overridden by individuals' rights.

Contractual necessity: To take steps requested before entering into a contract and to perform contracts with our clients.

Legal obligations: To comply with applicable legal, regulatory, accounting and record-keeping requirements.

Consent: Where consent is required, including for certain marketing activities or non-essential cookies and similar technologies. Consent may be withdrawn at any time without affecting earlier lawful processing.

The lawful basis used will depend on the purpose and circumstances of the processing.

5. Sharing Your Information

We may share personal information with trusted service providers where necessary to operate our business and deliver our services. These may include website hosting providers, email and cloud technology providers, professional advisers and other suppliers acting on our instructions.

Our website is built using Framer, and we use Microsoft 365 for business communications. These providers may process personal information on our behalf in accordance with their applicable contractual and data protection arrangements.

We may also disclose personal information where required by law, to comply with regulatory obligations, or to establish, exercise or defend legal claims.

We do not sell personal information. Where third parties process information on our behalf, we take appropriate steps to ensure suitable data protection arrangements are in place.

6. International Transfers of Personal Information

Some of the technology providers and service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable UK data protection law. Depending on the destination and circumstances, these safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms.

You may contact us at info@invictusconsultancy.co.uk to request further information about the safeguards applicable to international transfers of your personal information.

7. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, providing our services, maintaining business records and meeting legal, accounting or regulatory requirements.

Website enquiries that do not result in a client engagement will normally be retained for up to 12 months after our last meaningful contact with you, unless there is a legitimate reason or legal obligation to retain the information for longer.

Where an enquiry results in a client engagement, relevant information may become part of our client records and will be retained in accordance with the applicable contractual, legal and business record-keeping requirements.

We periodically review the personal information we hold and securely delete or anonymise information when it is no longer required.

You may contact us at info@invictusconsultancy.co.uk to ask about the retention period applicable to your personal information.

8. Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you may have the following rights in relation to your personal information:

Right of access: To request a copy of the personal information we hold about you.

Right to rectification: To request correction of inaccurate or incomplete personal information.

Right to erasure: To request deletion of your personal information in certain circumstances.

Right to restrict processing: To request that we limit how your personal information is used in certain circumstances.

Right to data portability: To receive certain personal information in a structured, commonly used and machine-readable format, where applicable.

Right to object: To object to certain processing, including processing for direct marketing.

Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time.

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, please contact info@invictusconsultancy.co.uk. We may need to verify your identity before responding to your request.

We will respond to valid requests within the timescales required by applicable data protection law, normally within one month.

9. Cookies and Website Analytics

Our website is built and hosted using Framer.

Framer's built-in website analytics may be used to understand general website performance and visitor activity. According to Framer, these analytics do not use cookies or persistent visitor identifiers and provide anonymised reporting.

We have not configured Google Analytics, advertising tracking pixels or campaign attribution tracking in the website settings reviewed for this policy.

Some technologies that are strictly necessary for website functionality or security may operate without consent where permitted by law.

If we introduce additional analytics, advertising, embedded content or tracking technologies that require consent, we will update our privacy information and implement appropriate consent controls before using them.

You can manage cookies through your browser settings, although restricting certain essential technologies may affect website functionality.

10. How We Protect Your Information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures may include access controls, password protection, multi-factor authentication, secure business systems, staff confidentiality arrangements and procedures for managing personal data.

Access to personal information is restricted to individuals who have a legitimate business need to use it.

We review our information security arrangements periodically and take appropriate action where risks or weaknesses are identified.

Although we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

11. Third-Party Websites and Links

Our website may contain links to external websites, platforms or services operated by third parties.

These websites and services have their own privacy notices, terms and data protection practices. We are not responsible for the content, security or privacy practices of third-party websites that we do not control.

We encourage you to review the privacy information provided by any third-party website before submitting personal information or using its services.

Where we use third-party services to process personal information on our behalf, we take appropriate steps to assess their data protection arrangements and establish suitable contractual safeguards where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, website functionality, business practices, legal requirements or data protection arrangements.

When we make changes, we will publish the revised Privacy Policy on this page and update the “Last updated” date at the top.

We encourage you to review this page periodically to remain informed about how we handle personal information.

Where a change requires us to provide additional information or obtain consent under applicable law, we will take the appropriate steps before implementing that change.

13. Contact Us and Complaints

If you have any questions about this Privacy Policy, how we handle personal information, or wish to exercise your data protection rights, please contact:

Invictus Care Compliance Ltd trading as Invictus Consultancy

604, Jigger Mast House, Mast Quay, London, SE18 5NH, United Kingdom
Email: info@invictusconsultancy.co.uk

We encourage you to contact us first if you have any concerns about how your personal information has been handled so that we can investigate and respond appropriately.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113

You may contact the ICO directly without first raising a complaint with us.