Who I am
This website is run by Glenn Wood, an independent influencer marketing consultant based in the United Kingdom, trading as Esprit Consultancy. For the purposes of UK data protection law, I am the controller of the personal data described in this policy, which means I decide how and why it is used.
- Email: Glenn@espritconsultancy.co.uk
- Postal address: [BUSINESS ADDRESS]
This policy explains how I collect and use personal data when you visit this website, make an enquiry, book a call or work with me, and the rights you have under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025.
The personal data I collect
- Enquiry details you give me through the booking form: the type of organisation you work for, your job title, first and last name, work email, phone number (optional), company or brand, website (optional), industry, the services you are interested in and anything you tell me about your brief.
- Booking details: if you book a call through my Google Calendar booking page, your name, email address, chosen time and any answers you give.
- Correspondence: emails and messages we exchange, and my notes from calls and meetings.
- Client and supplier information: if we work together, contact details for you and your colleagues, contract and invoicing details, and the campaign information you share with me.
- Creator and talent information: when running campaigns I may handle details about creators and their representatives, such as names, social handles, contact details, rates, audience insights and contract terms.
- Technical information: like any website, the servers that deliver this site receive your IP address and basic information about your device and browser. See section 7 and the Cookie Policy.
I do not intentionally collect special category data, such as information about health, ethnicity or religious beliefs. Please do not include it in the enquiry form.
How I use it and my lawful bases
I only use personal data where the law allows me to. The table below sets out what I use it for and the lawful basis I rely on.
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and arranging an introductory call | Legitimate interests (responding to business enquiries) and, where you are looking to engage me, taking steps at your request before entering into a contract |
| Providing consultancy services and managing our agreement | Performance of a contract, or legitimate interests where the contract is with your employer |
| Invoicing, bookkeeping and tax | Legal obligation |
| Running creator campaigns, including sourcing, contracting and reporting | Legitimate interests or performance of a contract. Where I act on a client’s behalf, the client is usually the controller and I process data on their instructions |
| Keeping records to establish or defend legal claims | Legitimate interests |
| Occasional updates about my services | Your consent, or for existing business contacts where the law allows. Every marketing email includes an unsubscribe link, and you can opt out at any time |
| Keeping this website secure and working properly | Legitimate interests |
Where I rely on legitimate interests, I have considered whether those interests are outweighed by your rights and freedoms. You can ask me for more information about this balancing test.
Ticking the box on the enquiry form confirms that you have read this policy. You can ask me to stop using your details at any time.
Who I share it with
I do not sell your personal data. I share it only where needed to run my business and deliver my services:
- Service providers acting on my instructions, including website hosting (Netlify), email (Google Workspace), scheduling (Google Calendar) and, if used, form handling (Google (Google Sheets and Apps Script, which receive enquiry form submissions)).
- Professional advisers, such as my accountant, lawyers and insurers.
- Clients, creators and their representatives, where this is necessary to deliver a campaign you are involved in.
- Authorities and regulators, where I am legally required to, for example HMRC.
- A successor business, if my business is restructured or transferred, in which case your data will remain protected in line with this policy.
International transfers
Some of my service providers, such as Google (which provides my email, booking calendar and enquiry form handling), are based in or process data in the United States or elsewhere outside the UK. Where personal data is transferred outside the UK, I make sure an appropriate safeguard is in place, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement or Addendum approved under UK law.
How long I keep it
| Type of data | How long |
|---|---|
| Enquiries that do not lead to work | Up to 12 months after our last contact |
| Client records, contracts and invoices | 6 years after the end of the financial year in which our engagement ends |
| Campaign and creator data | For the length of the campaign, then as agreed with the client, normally no longer than 6 years |
| Marketing preferences | Until you opt out. I keep a record of opt-outs so I do not contact you again |
When data is no longer needed, I delete it or anonymise it securely.
Cookies and similar technologies
This website does not use advertising or analytics cookies. The Google booking calendar only loads when you choose to show it, and Google may then set cookies. Full details are in the Cookie Policy.
Keeping your data secure
I use appropriate technical and organisational measures to protect personal data, including reputable service providers, access-controlled accounts with multi-factor authentication, and only collecting what I need. No method of sending data over the internet is completely secure, but I take care to protect the information you share with me.
Your rights
Under UK data protection law you have the right to:
- Access the personal data I hold about you.
- Correct data that is inaccurate or incomplete.
- Erase your data in certain circumstances.
- Restrict how I use your data in certain circumstances.
- Object to my use of your data where I rely on legitimate interests, and to object to direct marketing at any time.
- Data portability, meaning you can receive data you gave me in a commonly used format.
- Withdraw consent at any time, where I rely on consent.
I do not make decisions about you based solely on automated processing.
To use any of these rights, email Glenn@espritconsultancy.co.uk. There is normally no charge. I will respond within one month, which may be extended by up to two further months for complex requests. I may need to confirm your identity first.
Complaints
If you have a concern about how I handle your personal data, please contact me first at Glenn@espritconsultancy.co.uk and I will do my best to resolve it.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Children
My services are for businesses and this website is not aimed at children. Where a campaign involves creators under 18, I only work with them through a parent, guardian or authorised representative, and with appropriate safeguards in place, including any local rules on children working in sponsored content.
The enquiry form is for adults contacting me on behalf of a business. If you are under 18, please do not submit it. If I learn that I have received personal data from a child through this website, I will delete it.
Changes to this policy
I may update this policy from time to time, for example if I start using a new service provider. The date at the top shows when it was last changed.