Privacy Policy

Last updated: April 2026

Who we are

This privacy policy applies to Nathan Harmer Associates Ltd, a company registered in England and Wales (Company No: 07629278), whose registered office is at Office 7, 35-37 Ludgate Hill, London EC4M 7JN. We are registered with the Information Commissioner's Office under registration number Z2996124.

When we refer to "NHA", "we", "us" or "our" in this policy, we mean Nathan Harmer Associates Ltd. When we refer to "you", we mean anyone who visits this website or whose personal data we hold.

Our contact details for data protection purposes are: paul.foster@nathan-harmer-associates.co.uk or +44 (0)7964 623920.

What personal data we collect and why

We collect personal data in the following circumstances:

• Resource downloads: When you download a document from this website, we collect your name, work email address, and optionally your company name. This data is used to deliver the requested document, to log the download in our CRM (HubSpot), and to send a brief follow-up message from Paul Foster within 48 hours. The legal basis is legitimate interests: we have a legitimate interest in understanding who is engaging with our content and in making brief follow-up contact.
• Enquiry form submissions: When you complete an enquiry form, we collect your name, work email address, company name, sector, and the content of your message. This data is used solely to respond to your enquiry. The legal basis is legitimate interests.
• Discovery call bookings: When you book a discovery call via our HubSpot Meetings link, HubSpot collects your name and email address as part of the booking process. This data is used to manage the appointment and to create a record in our CRM. The legal basis is legitimate interests.
• Website analytics: We use HubSpot analytics to understand how visitors use this website. This may involve the use of cookies. Anonymised or aggregated data is used to improve the website. The legal basis is legitimate interests.

We do not collect sensitive personal data. We do not collect data from or knowingly about children.

What we do not do with your data

• We do not sell your personal data to any third party.
• We do not share your data with third parties for marketing purposes.
• We do not send unsolicited marketing emails. Any follow-up communication is directly related to your interaction with this website.
• We do not use automated decision-making or profiling in a way that produces legal or similarly significant effects.

Who we share data with

Your personal data may be processed by the following third-party service providers who act as data processors on our behalf:

• HubSpot Inc: Our CRM, form, meetings, and email platform. Data is stored on HubSpot's servers. HubSpot's privacy policy is available at hubspot.com/legal/privacy-policy.
• GoDaddy Inc: Our website hosting provider. GoDaddy's privacy policy is available at godaddy.com/legal/agreements/privacy-policy.

We do not transfer your personal data outside the UK or EEA except where the above processors operate infrastructure in other jurisdictions. Where such transfers occur, they are covered by appropriate safeguards including Standard Contractual Clauses.

How long we keep your data

We retain personal data collected through this website for a maximum of three years from the date of last interaction, unless you ask us to delete it sooner or unless we are required to retain it for legal or compliance purposes. HubSpot contact records are reviewed and cleaned periodically.

Cookies

This website uses cookies, including cookies placed by HubSpot for analytics and tracking purposes. A cookie consent notice is displayed on your first visit. You may decline non-essential cookies without affecting your ability to access the website. For more information about the cookies we use, please contact us directly.

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate data.
• Right to erasure: You may ask us to delete your personal data, subject to any legal obligations to retain it.
• Right to restriction: You may ask us to restrict the processing of your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests.
• Right to portability: You may request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at paul.foster@nathan-harmer-associates.co.uk. We will respond within one calendar month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Changes to this policy

We may update this privacy policy from time to time. The current version will always be available at this URL. The date at the top of this page indicates when it was last updated. We will not reduce your rights under this policy without providing clear notice.

Contact

For any questions about this privacy policy or about how we handle your personal data, please contact:
Paul Foster, Nathan Harmer Associates Ltd
paul.foster@nathan-harmer-associates.co.uk
+44 (0)7964 623920
Office 7, 35-37 Ludgate Hill, London EC4M 7JN