Legal

    Privacy Policy.

    Last updated: 11 October 2026

    Reforma Consultancy is committed to protecting your personal information and being transparent about how we use it. This policy explains what data we collect, why we collect it, and how we handle it, in plain language.

    Who we are

    Reforma Consultancy is a digital engineering and consultancy practice based in the United Kingdom. We provide custom software development, web development, and strategic digital consultancy services.

    For the purposes of this policy, "we", "us", and "our" refer to Reforma Consultancy. You can contact us at enquiry@reformaconsultancy.co.uk.

    What data we collect

    We collect personal data only when you actively provide it. This includes:

    • Your name and email address when you submit the contact form
    • Your company name, if you choose to provide it
    • The content of messages you send us
    • How you reached the site (the referring website, the page you landed on and any campaign tags in the link) and which button took you to the contact form, sent along with your enquiry
    • Usage data collected via analytics, only if you accept analytics cookies (pages visited, time on site, browser type)

    We do not collect sensitive personal data, financial information, or data from children under 16.

    How we use your data

    We use the data you provide solely to:

    • Respond to your enquiry and communicate about potential or active projects
    • Improve the quality and relevance of our services
    • Meet legal and contractual obligations

    We do not sell, rent, or share your personal data with third parties for marketing purposes.

    Legal basis for processing

    Under UK GDPR, we process your data on the following lawful bases:

    • Legitimate interests: responding to enquiries and managing client relationships
    • Consent: where you have explicitly agreed to us contacting you
    • Contractual necessity: where data processing is required to deliver agreed services

    Data retention

    We retain enquiry and contact data for up to 24 months after our last interaction. Where a project engagement has taken place, we retain relevant project data for up to 6 years in line with standard business record-keeping requirements.

    You may request deletion of your data at any time (see Your rights, below).

    Cookies and analytics

    We only use non-essential cookies if you agree to them in our cookie banner. You can change your choice at any time using (also in the footer of every page).

    rc_consent (browser storage)
    Reforma Consultancy · 6 months
    Remembers your cookie choice (strictly necessary)
    _ga, _ga_2741P40HV7
    Google Analytics 4 · 2 years
    Counts visits and how pages are used
    _clck, _clsk (and related Microsoft cookies)
    Microsoft Clarity · 1 year / 1 day
    Heatmaps and session replays showing how pages are used. Text you type into forms is masked.
    rc_attrib (browser storage)
    Reforma Consultancy · 30 days
    Remembers how you first found us (e.g. a search engine or a partner link), sent with any enquiry

    rc_attrib is only stored if you accept analytics cookies. If you don't, we still note the page you arrived on and the referring website for the current visit only, without storing anything on your device, and include it with your enquiry.

    Your rights

    Under UK GDPR, you have the right to:

    • Access the personal data we hold about you
    • Request correction of inaccurate data
    • Request deletion of your data
    • Object to or restrict how we process your data
    • Withdraw consent at any time, where consent was the basis for processing
    • Lodge a complaint with the Information Commissioner's Office (ICO)

    To exercise any of these rights, contact us at enquiry@reformaconsultancy.co.uk. We will respond within 30 days.

    Third-party services

    Where we use third-party tools (such as email platforms or analytics services), we ensure they process data only as instructed and in compliance with applicable data protection law. We do not transfer personal data outside the UK or EEA without appropriate safeguards in place.

    • EmailJS (emailjs.com) delivers messages sent through our contact forms to our inbox. It processes the details you enter (name, email, company, message).
    • Google Analytics (Google) and Microsoft Clarity (Microsoft) provide website analytics, only with your consent.

    These providers may process data outside the UK. Where they do, they rely on recognised safeguards such as the UK International Data Transfer Addendum or the UK–US data bridge.

    Changes to this policy

    We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised. We encourage you to review it periodically.

    Contact

    If you have any questions about this policy or how we handle your data, please contact us:

    Reforma Consultancy
    enquiry@reformaconsultancy.co.uk