PRIVACY NOTICE
Your information.
Handled with care.
How we use personal information when you visit our website or contact Three Oaks Consulting.
Last updated: 23 October 2026
This notice covers our website and initial business enquiries. If we work together, any additional information needed for the commission will be addressed in the relevant engagement arrangements.
Who is responsible.
Three Oaks Consulting is the trading name of Three Oaks Consultancy Limited, the controller responsible for the personal information described in this notice. We are registered in England and Wales under company number 16419223.
Our registered office is The Retreat, 406 Roding Lane South, Woodford Green, Essex, IG8 8EY. This is our registered office address; our business is based in Aughton, West Lancashire.
For privacy questions or to exercise your rights, email
What we collect.
When you contact us, we receive the information you provide, such as your name, email address, organisation, telephone number, enquiry type, requirements and subsequent correspondence. Organisation and telephone details are optional on the form. We need your name, email address and enquiry details to respond usefully.
Providing an initial enquiry is voluntary and is not a statutory or contractual requirement. Without sufficient contact information, we may be unable to respond. Please avoid including sensitive personal information, passwords or confidential information belonging to clients or other people.
Our hosting and security providers may process technical information such as IP addresses, browser details, request times and pages requested to deliver and protect the website.
Why we use it.
We use enquiry information to understand your requirements, reply, discuss potential work or partnerships, prepare proposals and keep a record of the conversation. Our lawful basis is our legitimate interest in responding to business enquiries and managing professional relationships. Where you ask us to take steps towards a contract with you personally, we may instead rely on taking those steps at your request.
Technical information supports our legitimate interest in running a reliable, secure website. Where information must be retained or disclosed to meet a legal obligation, that obligation is our lawful basis. Sending an enquiry does not sign you up to a mailing list. We do not sell enquiry information or make decisions about you with legal or similarly significant effects solely through automated processing.
Your right to object: you can object to our use of your information based on legitimate interests by contacting us. We will consider your request and stop that processing unless we have an overriding lawful reason to continue.
Who handles your information.
The website is hosted using ChatGPT Sites and its hosting infrastructure. The enquiry form uses FormSubmit to forward your submission to our Microsoft 365 business email. These services process information needed to provide hosting, security, form delivery and email services.
We may share relevant information with an associate or delivery partner where needed to assess or deliver the support you request. We limit this to the information needed for that purpose. Information may also be disclosed to professional advisers, insurers or authorities where necessary for advice, a legal obligation or a legal claim.
FormSubmit states that its submission archive retains submissions for 30 days. This is separate from the copy delivered to our email account. Read FormSubmit’s privacy information and submission archive documentation.
Technology providers operate internationally and information may be processed outside the UK. Processing locations and transfer arrangements depend on the provider and service. You can contact us for information about the arrangements relevant to your enquiry. If you prefer not to use FormSubmit, contact us directly by email or telephone.
How long we keep it.
We keep enquiry records for as long as reasonably needed to answer the enquiry, complete relevant follow-up and maintain the associated business relationship. In deciding whether a record is still needed, we consider whether the enquiry remains active, whether a proposal or commission is being discussed, and whether the information is needed for a complaint, dispute or legal obligation.
Information that becomes part of a client commission may need to be retained with the contract and related business records. Retention then depends on the contract, statutory record-keeping duties and any relevant claims period. FormSubmit’s 30-day archive period does not automatically delete copies in our business email.
Your choices and rights.
Depending on the circumstances and lawful basis, you can ask for access to your personal information, correction of inaccurate information, deletion, restriction of use or transfer of information in a portable format. These rights are subject to applicable conditions and exemptions. Contact us using the details above; we may need to verify your identity before responding.
You can raise a concern with us at any time. You also have the right to complain to the Information Commissioner’s Office without first contacting us. Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113.
Cookies and external services.
The website’s own page code does not include advertising trackers or visitor analytics. Its photographs and video are served as website files rather than embedded social-media players. Hosting and security services may use technical measures needed to deliver and protect the site.
Submitting the form takes you through FormSubmit, which may use cookies and display a spam-prevention check. External websites you choose to visit have their own privacy and cookie arrangements. You can manage cookies in your browser settings.
We will update this notice if our services or use of information changes. The date above shows when it was last revised.