Privacy Policy

1. Who we are

Mavora Consultancy ("Mavora", "we", "us", "our") is a consultancy practice registered in England & Wales, providing strategy, commercial, operational, brand, people and membership services across retail, charity, theatre, culture and hospitality sectors. For the purposes of UK data protection law, we are the "controller" of the personal information we collect through this website and in the course of our engagements, unless a written agreement states otherwise.

2. The kind of information we collect

We only collect the personal information we need to operate the website, respond to enquiries, deliver our services, and meet our legal and professional obligations. We collect:

1. 01Contact details you give us – such as your name, job title, organisation, email address, postal address and any message you send through our contact form or in a discovery call.
2. 02Information you provide when engaging us – including billing and contract details, and the information needed to deliver a particular engagement.
3. 03Technical information about your visits – such as your IP address, browser type and version, device type, referring pages, pages viewed and approximate location derived from your IP address.
4. 04Information we receive if you register for member areas, events, newsletters or downloads – such as your account details and preferences.
5. 05Information about individuals within a client organisation that you provide to us in the course of an engagement, for which you are responsible for having a lawful basis to share.

3. How we collect information

1. 01Directly from you when you complete a form, email us, take a discovery call, register for an account or event, or enter into a written agreement with us.
2. 02Automatically when you visit this website, through cookies and similar technologies (see section 10).
3. 03From third parties where permitted by law – for example, professional advisors, referees, or suppliers working with us on an engagement, or publicly available sources where relevant and necessary.

4. Lawful basis for processing

We process personal information only where we have a lawful basis under the UK GDPR. The bases we rely on are:

1. 01Consent – for example, when you sign up to receive marketing or newsletters, or agree to non-essential cookies.
2. 02Contract – where processing is necessary to provide a service under, or take steps before entering, a written agreement with you.
3. 03Legal obligation – where we must process data to comply with a law, regulation, or professional or regulatory requirement.
4. 04Legitimate interests – where we have a genuine business reason that is not overridden by your rights, such as improving our services, keeping the website secure, and maintaining records.

5. How we use your information

We use the information we collect to:

1. 01Respond to your enquiries and provide the free 30-minute discovery call.
2. 02Provide, manage and deliver our consultancy, training, recruitment and related services under a written agreement.
3. 03Process payments and maintain accurate financial and contractual records.
4. 04Communicate with you about your engagement, and where you have agreed, send relevant updates, insights and invitations.
5. 05Improve our website, services, content and the way we engage with clients.
6. 06Keep the website and our systems secure and prevent fraud, misuse and unlawful activity.
7. 07Meet our legal, regulatory, accounting and professional obligations, and respond to complaints or disputes.

6. When we share your information

We do not sell your personal information. We may share it only in the limited circumstances below, and only to the extent necessary:

1. 01With trusted third parties who help us deliver our services – such as sub-consultants, training partners, recruiters or suppliers – under written agreements that require confidentiality and compliance with data protection law.
2. 02With payment and IT service providers – such as accounting, hosting, email and customer relationship tools – who process information on our behalf.
3. 03Where required by law, court order, or a regulator, or to protect our rights, property or safety, or that of others.
4. 04In connection with a sale, merger, restructure or transfer of all or part of our business, subject to the protections in this policy.
5. 05We remain responsible for how our service providers handle your information and require them to protect it to a comparable standard.

7. International transfers

1. 01We are based in the United Kingdom and your information is generally processed here. Some of our service providers may operate outside the UK.
2. 02Where personal information is transferred outside the UK, we do so only where an appropriate safeguard is in place – such as UK adequacy regulations, standard contractual clauses, or another lawful transfer mechanism – and only to the extent necessary.

8. How long we keep information

1. 01We keep personal information only for as long as we need it for the purpose it was collected, and to meet legal, regulatory, accounting or professional record-keeping requirements.
2. 02As a general guide: enquiry and contact-form details are retained for up to 24 months unless you become a client; client records are retained for the duration of the engagement and for up to 7 years afterwards; and marketing preferences are retained until you opt out.
3. 03When information is no longer needed, we delete it securely or anonymise it so it can no longer identify you.

9. Your data protection rights

Under UK data protection law you have the following rights, which you can exercise at any time by contacting us using the details in section 13:

1. 01Access – to ask what personal information we hold about you and to receive a copy.
2. 02Rectification – to ask us to correct information that is inaccurate or incomplete.
3. 03Erasure – to ask us to delete your personal information in certain circumstances.
4. 04Restriction – to ask us to limit how we use your information.
5. 05Objection – to object to processing based on legitimate interests or for direct marketing.
6. 06Portability – to receive certain information in a structured, machine-readable format and, where technically feasible, to have it transferred to another provider.
7. 07Withdrawal of consent – where we rely on your consent, you can withdraw it at any time without affecting processing that has already taken place.
8. 08You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your information.

10. Cookies and similar technologies

1. 01This website uses cookies and similar technologies to operate, remember your preferences, and understand how the site is used so we can improve it.
2. 02Essential cookies keep the website working and are set as soon as you visit. You cannot turn these off without affecting core functionality.
3. 03Analytics and optional cookies help us understand traffic and performance and are only set where you have consented. You can manage or withdraw that consent at any time through your browser settings.
4. 04Further detail, including a list of the cookies we use, is available on the Legal page.

11. Keeping your information secure

1. 01We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, destruction or disclosure, including access controls, encryption in transit, and regular review of our systems and suppliers.
2. 02No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we do our best to protect your information.
3. 03If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO and, where required, you, without undue delay.

12. Children's information

1. 01Our services and this website are intended for organisations and professionals. We do not knowingly collect personal information from children under 16.
2. 02If you believe we have collected information from a child in error, please contact us and we will delete it.

13. Contact and complaints

You can contact us about your personal information or this policy using the details below. We will respond to requests without undue delay and within one month, and will not charge a fee unless a request is manifestly unfounded or excessive.

1. 01Email: hello@mavoraconsulting.com
2. 02Studio: MAVORA Consultancy, 20-22 Wenlock Road, London, N1 7GU
3. 03Office hours: Monday–Friday, 9am–6pm GMT
4. 04If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Questions about your data? Get in touch.

14. Changes to this policy

1. 01We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or the law. The version published on this page at the time of your visit applies to your use.
2. 02Where a change significantly affects how we use your information, we will draw it to your attention on the website or by direct notice where appropriate.