Privacy Policy

Last updated: 20/08/2025

Current Works Consultancy (“we,” “our,” or “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with UK data protection law (UK GDPR and the Data Protection Act 2018).

1.WHO WE ARE 

We are Current Works Consultancy, a UK-based rail consultancy business providing specialist services across the rail industry.

Our contact details:
Email: alastair@currentworksconsultancy.co.uk
Website: www.currentworksconsultancy.co.uk

For the purposes of UK data protection law, we are the “data controller” of your personal data.

2. INFORMATION WE COLLECT 

We may collect and process the following personal information:

• Name and job title
• Business name and business contact details
• Email address and phone number
• Any other personal data you provide when engaging our services
   

3. HOW WE USE YOUR INFORMATION

We use your personal data to:

• Provide and manage our consultancy services
• Communicate with you regarding projects, contracts, and enquiries
• Send invoices and manage payments
• Meet legal and regulatory obligations
• Send you marketing communications about our services (you may opt out at any time)
   

4. LEGAL BASIS FOR PROCESSING 

We process your personal data on the following legal bases:

• Contract: to deliver consultancy services you have requested
• Legal obligation: to comply with accounting, tax, and regulatory duties
• Legitimate interest: to manage client relationships and promote our services
• Consent: where you have agreed to receive marketing communications
   

5.SHARING YOUR DATA. WE WILL NEVER SELL YOUR DATA BUT MAY SHARE IT WITH:

• Trusted partners and subcontractors who support the delivery of our services
• Service providers (such as IT, website hosting, email, and cloud storage)
• Professional advisers (accountants, legal advisers, etc.)
• Regulators or authorities where required by law
   

All third parties are required to handle your data securely and only use it for the agreed purpose.

6. DATA RETENTION 

We keep your personal data only for as long as necessary to fulfil the purposes it was collected for, including legal, accounting, or reporting requirements. Generally, business records are retained for a minimum of 6 years.

7. YOUR RIGHTS 

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data (where legally possible)
• Object to or restrict how we process your data
• Withdraw consent for marketing communications at any time
   

To exercise these rights, please contact us at: alastair@currentworksconsultancy.co.uk

8. SECURITY 

We take appropriate technical and organisational measures to protect your personal information against loss, misuse, or unauthorised access.

9. INTERNATIONAL TRANSFERS

If your data is transferred outside the UK (for example, through cloud-based services), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).

10. CHANGES TO THIS POLICY 

We may update this Privacy Policy from time to time. Any changes will be posted on our website with a revised 20/08.2025 date.