Privacy Policy
Privacy Policy
Last updated: 01/08/2026
1. About this Privacy Policy
I am David Arnell, an independent business advisor providing business advisory and business performance services to owner-managed businesses.
I respect your privacy and am committed to handling your personal information responsibly and transparently.
This Privacy Policy explains what personal information I may collect, why I collect it, how I use it, how I protect it and what rights you have in relation to your information.
For the purposes of applicable UK data protection legislation, I am the data controller responsible for the personal information collected through this website and in connection with my services.
Business: David Arnell | Business Advisory
Email: [EMAIL ADDRESS]
Website: [WEBSITE ADDRESS]
2. Information I may collect
Depending on how you interact with me, I may collect information including:
Your name
Business name
Job title or position
Email address
Telephone number
Information you provide through my website
Information you provide when contacting me
Information about your business that you voluntarily share with me
Information relating to services you enquire about or purchase
Information contained within correspondence between us
Information required to manage an ongoing business relationship
Technical information about how you use my website, where applicable
I will only request information that is reasonably necessary for the relevant purpose.
3. How I collect information
I may collect personal information when you:
Contact me through my website
Complete a contact form
Email or telephone me
Book a strategy session or consultation
Request information about my services
Become a client
Provide information as part of an advisory engagement
Communicate with me during an ongoing client relationship
I may also collect limited technical information automatically when you visit my website, depending on the cookies and analytics technologies I use.
4. How I use your information
I may use your personal information to:
Respond to enquiries
Arrange calls, meetings or consultations
Provide business advisory services
Prepare proposals and reports
Communicate with you about services
Manage my relationship with you
Provide and improve my services
Process payments where applicable
Maintain appropriate business and financial records
Protect the security of my website and systems
Comply with legal and regulatory obligations
Deal with disputes or potential disputes
Understand and improve how my website is used
I will not use your personal information for unrelated purposes without an appropriate lawful basis.
5. Lawful basis for processing
Under UK data protection law, I must have a lawful basis for processing your personal information.
Depending on the circumstances, I may rely on:
Contract
Where processing is necessary to provide a service you have requested or to take steps before entering into a contract with you.
Legitimate interests
Where processing is necessary for legitimate business purposes, provided that those interests do not override your rights and freedoms.
Consent
Where you have specifically given consent for your information to be used for a particular purpose.
Legal obligation
Where I am required to process information to comply with a legal or regulatory requirement.
6. Confidential business information
As part of my advisory work, you may choose to share commercially sensitive information about your business with me.
I understand that this information may be confidential and commercially important.
I will take reasonable steps to protect confidential information and will only use it for legitimate purposes connected with providing my services, managing my business or complying with legal obligations.
I will not sell or commercially exploit your confidential business information.
Where appropriate, additional confidentiality provisions may be included within individual client engagement agreements.
7. Use of AI and technology
Technology, including artificial intelligence tools, may be used as part of my business processes.
AI may assist with activities such as:
Analysing information
Identifying trends or anomalies
Organising information
Producing initial drafts
Supporting research
Improving efficiency
However, AI does not replace my professional judgement.
Where AI-assisted analysis or content contributes to advisory work, I remain responsible for reviewing and interpreting the output.
I will take reasonable steps to ensure that confidential and personal information is handled appropriately when using third-party technology.
Where particularly sensitive information is involved, additional safeguards may be applied depending on the circumstances and technology being used.
8. Sharing your information
I do not sell, rent or trade your personal information.
I may use trusted third-party service providers to operate my business and provide services to you.
These may include providers of:
Website hosting
Email
Cloud storage
Online booking
Payment processing
Accounting software
Website analytics
IT and cybersecurity services
Business software
AI and technology services
Where third parties process personal information on my behalf, I will take reasonable steps to ensure appropriate data protection and confidentiality arrangements are in place.
I may also disclose information where required by law, regulation, court order or another lawful authority.
9. International transfers
Some technology providers I use may process information outside the United Kingdom.
Where personal information is transferred outside the UK, I will take reasonable steps to ensure that the transfer is made in accordance with applicable UK data protection requirements.
10. How long I keep your information
I will retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
The appropriate retention period may depend on:
Whether you are a prospective, current or former client
The nature of the services provided
Legal and regulatory requirements
Accounting and record-keeping requirements
The need to establish, exercise or defend legal claims
When information is no longer required, I will take reasonable steps to securely delete or anonymise it.
11. Cookies
My website may use cookies or similar technologies.
Cookies are small files that can be stored on your device when you visit a website.
Depending on the technology used on this website, cookies may be used for:
Essential website functionality
Security
Remembering preferences
Website analytics
Understanding how visitors use the website
Improving website performance
Where required by law, I will obtain your consent before using non-essential cookies.
You can also manage cookies through your browser settings.
12. Website analytics
I may use website analytics tools to understand how visitors interact with my website.
Depending on the service used, information may include:
Pages visited
Approximate location
Device type
Browser type
Referral source
Time spent on pages
General website usage information
Analytics are used to understand and improve the website and my services.
13. Your data protection rights
Under UK data protection law, you may have a number of rights regarding your personal information.
These may include the right to:
Ask what personal information I hold about you
Request access to your personal information
Request correction of inaccurate or incomplete information
Request deletion of your information in certain circumstances
Request restriction of processing in certain circumstances
Object to certain types of processing
Request transfer of certain information to another organisation
Withdraw consent where processing is based on consent
These rights are subject to certain legal conditions and exemptions.
If you would like to exercise one of these rights, please contact me using the details below.
14. Keeping your information secure
I take reasonable technical and organisational measures to protect personal information against:
Unauthorised access
Loss
Destruction
Misuse
Unauthorised disclosure
Accidental alteration
However, no electronic storage system or method of transmitting information over the internet can be guaranteed to be completely secure.
15. Third-party websites
My website may contain links to third-party websites or services.
I am not responsible for the privacy practices, security or content of those websites.
I recommend reviewing the privacy policy of any third-party website before providing personal information.
16. Marketing communications
I will not send you marketing communications simply because you have contacted me about my services unless I have an appropriate lawful basis to do so.
Where marketing consent is required, I will ask for it.
You can withdraw your consent to marketing communications at any time.
17. Children’s information
My services are intended for business owners and businesses and are not directed towards children.
I do not knowingly collect personal information from children through this website.
18. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my services, technology, legal requirements or business practices.
The latest version will always be published on this website together with the date it was last updated.
19. Contact
If you have any questions about this Privacy Policy or how I handle your personal information, please contact me:
David Arnell
David Arnell | Business Advisory
Email: [EMAIL ADDRESS]
I will aim to respond to privacy-related enquiries as soon as reasonably possible.
If you are unhappy with how I have handled your personal information, I would encourage you to contact me first so that I have an opportunity to resolve your concern.
You also have the right to raise a concern with the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
ICO: https://ico.org.uk/
David Arnell | Business Advisory
Helping owner-managed businesses understand their numbers, make better decisions and move forward with confidence.
Last updated: 01/08/2026
1. About this Privacy Policy
I am David Arnell, an independent business advisor providing business advisory and business performance services to owner-managed businesses.
I respect your privacy and am committed to handling your personal information responsibly and transparently.
This Privacy Policy explains what personal information I may collect, why I collect it, how I use it, how I protect it and what rights you have in relation to your information.
For the purposes of applicable UK data protection legislation, I am the data controller responsible for the personal information collected through this website and in connection with my services.
Business: David Arnell | Business Advisory
Email: [EMAIL ADDRESS]
Website: [WEBSITE ADDRESS]
2. Information I may collect
Depending on how you interact with me, I may collect information including:
Your name
Business name
Job title or position
Email address
Telephone number
Information you provide through my website
Information you provide when contacting me
Information about your business that you voluntarily share with me
Information relating to services you enquire about or purchase
Information contained within correspondence between us
Information required to manage an ongoing business relationship
Technical information about how you use my website, where applicable
I will only request information that is reasonably necessary for the relevant purpose.
3. How I collect information
I may collect personal information when you:
Contact me through my website
Complete a contact form
Email or telephone me
Book a strategy session or consultation
Request information about my services
Become a client
Provide information as part of an advisory engagement
Communicate with me during an ongoing client relationship
I may also collect limited technical information automatically when you visit my website, depending on the cookies and analytics technologies I use.
4. How I use your information
I may use your personal information to:
Respond to enquiries
Arrange calls, meetings or consultations
Provide business advisory services
Prepare proposals and reports
Communicate with you about services
Manage my relationship with you
Provide and improve my services
Process payments where applicable
Maintain appropriate business and financial records
Protect the security of my website and systems
Comply with legal and regulatory obligations
Deal with disputes or potential disputes
Understand and improve how my website is used
I will not use your personal information for unrelated purposes without an appropriate lawful basis.
5. Lawful basis for processing
Under UK data protection law, I must have a lawful basis for processing your personal information.
Depending on the circumstances, I may rely on:
Contract
Where processing is necessary to provide a service you have requested or to take steps before entering into a contract with you.
Legitimate interests
Where processing is necessary for legitimate business purposes, provided that those interests do not override your rights and freedoms.
Consent
Where you have specifically given consent for your information to be used for a particular purpose.
Legal obligation
Where I am required to process information to comply with a legal or regulatory requirement.
6. Confidential business information
As part of my advisory work, you may choose to share commercially sensitive information about your business with me.
I understand that this information may be confidential and commercially important.
I will take reasonable steps to protect confidential information and will only use it for legitimate purposes connected with providing my services, managing my business or complying with legal obligations.
I will not sell or commercially exploit your confidential business information.
Where appropriate, additional confidentiality provisions may be included within individual client engagement agreements.
7. Use of AI and technology
Technology, including artificial intelligence tools, may be used as part of my business processes.
AI may assist with activities such as:
Analysing information
Identifying trends or anomalies
Organising information
Producing initial drafts
Supporting research
Improving efficiency
However, AI does not replace my professional judgement.
Where AI-assisted analysis or content contributes to advisory work, I remain responsible for reviewing and interpreting the output.
I will take reasonable steps to ensure that confidential and personal information is handled appropriately when using third-party technology.
Where particularly sensitive information is involved, additional safeguards may be applied depending on the circumstances and technology being used.
8. Sharing your information
I do not sell, rent or trade your personal information.
I may use trusted third-party service providers to operate my business and provide services to you.
These may include providers of:
Website hosting
Email
Cloud storage
Online booking
Payment processing
Accounting software
Website analytics
IT and cybersecurity services
Business software
AI and technology services
Where third parties process personal information on my behalf, I will take reasonable steps to ensure appropriate data protection and confidentiality arrangements are in place.
I may also disclose information where required by law, regulation, court order or another lawful authority.
9. International transfers
Some technology providers I use may process information outside the United Kingdom.
Where personal information is transferred outside the UK, I will take reasonable steps to ensure that the transfer is made in accordance with applicable UK data protection requirements.
10. How long I keep your information
I will retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
The appropriate retention period may depend on:
Whether you are a prospective, current or former client
The nature of the services provided
Legal and regulatory requirements
Accounting and record-keeping requirements
The need to establish, exercise or defend legal claims
When information is no longer required, I will take reasonable steps to securely delete or anonymise it.
11. Cookies
My website may use cookies or similar technologies.
Cookies are small files that can be stored on your device when you visit a website.
Depending on the technology used on this website, cookies may be used for:
Essential website functionality
Security
Remembering preferences
Website analytics
Understanding how visitors use the website
Improving website performance
Where required by law, I will obtain your consent before using non-essential cookies.
You can also manage cookies through your browser settings.
12. Website analytics
I may use website analytics tools to understand how visitors interact with my website.
Depending on the service used, information may include:
Pages visited
Approximate location
Device type
Browser type
Referral source
Time spent on pages
General website usage information
Analytics are used to understand and improve the website and my services.
13. Your data protection rights
Under UK data protection law, you may have a number of rights regarding your personal information.
These may include the right to:
Ask what personal information I hold about you
Request access to your personal information
Request correction of inaccurate or incomplete information
Request deletion of your information in certain circumstances
Request restriction of processing in certain circumstances
Object to certain types of processing
Request transfer of certain information to another organisation
Withdraw consent where processing is based on consent
These rights are subject to certain legal conditions and exemptions.
If you would like to exercise one of these rights, please contact me using the details below.
14. Keeping your information secure
I take reasonable technical and organisational measures to protect personal information against:
Unauthorised access
Loss
Destruction
Misuse
Unauthorised disclosure
Accidental alteration
However, no electronic storage system or method of transmitting information over the internet can be guaranteed to be completely secure.
15. Third-party websites
My website may contain links to third-party websites or services.
I am not responsible for the privacy practices, security or content of those websites.
I recommend reviewing the privacy policy of any third-party website before providing personal information.
16. Marketing communications
I will not send you marketing communications simply because you have contacted me about my services unless I have an appropriate lawful basis to do so.
Where marketing consent is required, I will ask for it.
You can withdraw your consent to marketing communications at any time.
17. Children’s information
My services are intended for business owners and businesses and are not directed towards children.
I do not knowingly collect personal information from children through this website.
18. Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my services, technology, legal requirements or business practices.
The latest version will always be published on this website together with the date it was last updated.
19. Contact
If you have any questions about this Privacy Policy or how I handle your personal information, please contact me:
David Arnell
David Arnell | Business Advisory
Email: [EMAIL ADDRESS]
I will aim to respond to privacy-related enquiries as soon as reasonably possible.
If you are unhappy with how I have handled your personal information, I would encourage you to contact me first so that I have an opportunity to resolve your concern.
You also have the right to raise a concern with the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
ICO: https://ico.org.uk/
David Arnell | Business Advisory
Helping owner-managed businesses understand their numbers, make better decisions and move forward with confidence.