Who are we?
This website is operated by Concatena Limited, which is a company registered in England with Company Number 16296561 and is registered as a data controller with the Information Commissioner’s Office with registration number ZB875076.
How to contact us
If you have a question or comment about our data protection practices, you can contact us at data@concatena.co.uk
What personal data do we use and how?
You can use this website without providing any personal data.
If you subscribe to our newsletter, we will collect email address and name (if any) you provide. We will use this to send you our newsletter, and to carry out any admin or business planning related to the newsletter.
If you comment on an post, we will collect the information that you provide to publish (or not) your comment on the post. If you provide an email address, we may contact you about your post if appropriate (for example if you have asked a question, or if the comment is not suitable for publishing).
If you email us, we will collect the information that you provide for our own record keeping and to respond to your email.
If we provide you with services, we will also use the personal data you or others provide for the purposes of our services, including the administration and development of those services and our own compliance and record keeping activities
What's your legal basis for this processing?
I'm glad you asked! I wouldn't normally include all of this information in this way, but this is a legal website, after all...
The (UK) GDPR says we have to tell you what the legal basis is for our processing. This doesn't mean a lot to most people!
The (UK) GDPR restricts the purposes that you can process personal data for - you can't just use it for anything.
In our case, the legal basis for us processing your personal data to send you our newsletter or to publish your post is consent - you have taken a positive action to ask for us to take this action.
If you (personally) enquire about or buy our services, our legal basis for processing your personal data in relation to those services is that it is necessary to enter into or perform a contract. This would most commonly apply to coaching services.
For almost all other processing we do, our legal basis is "legitimate interests". This means that we consider that it's appropriate for us to use your data in this way, and we don't consider that there's an appropriate reason not to.
For example, as well as sending you our newsletter, we might count how many people have signed up to it, and use that information to inform our next steps. This is a legitimate use of your information as it helps us allocate business resources. We'd first need to make sure we were happy that there wasn't an adverse impact on you of us doing this (there isn't).
Alternatively, if you buy our services on behalf of your business, but you want us to know who you are and to correspond with you, we would do so on the legal basis of legitimate interests, first considering whether there is any adverse impact on you.
We do this kind of assessment each time we use your personal data - sometimes it's quick and easy, and sometimes it may take more thought. If we do think that there would be any adverse impact on you, we will not process the data in that way, and either abandon that plan, or look to see if we can achieve our objectives in a different way.
Who do we share your personal data with?
In general, we don't share your personal data with anyone unless we have told you that we are going to do so.
We do use service providers to provide us with technology, banking and other administrative services.
Will your personal data leave the UK?
Yes, your personal data may be processed or stored in servers outside the UK.
We have tried very hard to source services that operate from or process personal data in the UK or Europe only, but this is very difficult to do across the board, and even Europe-based providers may use support services outside of Europe to ensure round-the-clock support.
To the extent that it hasn't been reasonably feasible for us to acquire a service which provides hosting in the UK or Europe, your personal data may be transferred to other jurisdictions in order to benefit from such services.
In these cases, your personal data will be protected by appropriate safeguards (most commonly a data transfer agreement).
Cookies (Yum!)
Despite our love of the baked good, we try not to use cookies on our website, but we're not quite yet sufficiently technically proficient to code everything ourselves. So in the meantime, there are some cookies placed for hosting purposes only. As at the date of writing, these appear to be limited to:
- jsDelivr
- jQuery
- Google Fonts and
- Google Static
Your rights relating to your personal data
Where we process your personal data on the basis of consent (such as sending you a newsletter or posting comments), you can withdraw your consent at any time, and we will stop processing your data, although we may still retain a record for record keeping purposes.
Where we process your personal data on the basis of legitimate interests lawful basis, you can object to this processing at any time, and we will stop processing your data unless there is a compelling reason why our processing should continue, which overrides your interests, rights and freedoms or that the processing is necessary for us to establish, exercise or defend a legal claim.
Depending on the circumstances, you also may have the right to:
- access your personal data and to be provided with certain information in relation to it, such as the purpose for which it is processed, the recipients or categories of recipient to whom it is disclosed and the period for which it will be stored;
- require us to correct any inaccuracies in your personal data without undue delay;
- require us to erase your personal data;
- require us to restrict processing of your personal data;
- receive the personal data which you have provided to us, in a machine readable format, where we are processing it on the basis of your consent or because it is necessary for your contract with us and where the processing is automated; and
- object to a decision that we make which is based solely on automated processing of your personal data.
Please contact data@concatena.co.uk if you would like to exercise any of these rights.
We also encourage you to let us know if you have any concern about how we are processing your personal data so we can try to resolve your concerns. However, if you consider that we are in breach of our obligations under data protection laws, you are always entitled to submit a complaint to the Information Commissioner's Office.
Privacy Notice Last Updated 11 June 2025
11 June 2025 - first published on www.concatena.co.uk