BOHIO CONSULTING PRIVACY NOTICE
Last Updated: September 2026
Introduction
Bohio Consulting (“we”, “our”, “us”) is committed to protecting your privacy and handling your personal information in a transparent, secure and lawful manner.
Bohio Consulting is the data controller responsible for the collection, use, storage and protection of personal information collected through our website, consultancy services, workshops, events, marketing activities, business operations and communications.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.
Contact Details
Bohio Consulting
Registered Office: 190 Billet Road, Walthamstow, London, E17 5DX
Email: racquel@bohioconsulting.com
If you have any questions regarding this Privacy Notice or how we process your personal information, please contact us using the details above.
Data Protection Principles
When processing personal information, we are guided by the following principles:
- We will only collect personal information for specific, lawful and legitimate purposes.
- We will only collect information that is relevant and necessary for those purposes.
- We will process personal information fairly, lawfully and transparently.
- We will keep information accurate and up to date where reasonably possible.
- We will implement appropriate technical and organisational measures to protect information.
- We will retain personal information only for as long as necessary.
- We will respect and uphold the rights of individuals under applicable data protection laws.
How We Collect Personal Information
We collect personal information directly from you when:
- You contact us by email, telephone, website enquiry forms or social media.
- You enquire about our consultancy services.
- You engage us to provide consultancy services.
- You attend workshops, training sessions, webinars or events.
- You subscribe to newsletters or marketing communications.
- You download resources from our website.
- You complete questionnaires, surveys or feedback forms.
- You interact with our website through cookies and analytics technologies.
- You work with us in a professional or commercial capacity.
We may also collect information from:
- Publicly available sources.
- Professional networking platforms.
- Referral partners.
- Business directories and publicly available company information.
What Information We Collect
Depending on your relationship with us, we may collect:
Identity Information
- Name
- Job title
- Company name
- Professional profile information
Contact Information
- Email address
- Telephone number
- Postal address
Business Information
- Industry sector
- Business objectives
- Customer experience information
- Consultancy requirements
- Service preferences
Technical Information
- IP address
- Browser type and version
- Device information
- Website usage data
- Pages visited and interactions with our website
Marketing Information
- Marketing preferences
- Newsletter subscriptions
- Event registrations
- Communication preferences
Special Category Information
We do not routinely collect special category personal data.
Where special category information becomes necessary for a particular service, event or programme, we will obtain your explicit consent before collecting or processing that information and will ensure appropriate safeguards are in place.
How We Use Personal Information
We use personal information to:
- Deliver consultancy and advisory services.
- Manage client relationships.
- Respond to enquiries and requests.
- Develop proposals, contracts and service agreements.
- Administer events, workshops and training.
- Process invoices and maintain business records.
- Improve our services and customer experience.
- Manage and secure our website.
- Send marketing communications where permitted by law.
- Meet legal, professional and regulatory obligations.
- Protect our business, clients and systems from fraud or misuse.
We do not sell, rent or trade personal information to third parties.
Legal Basis for Processing
Under UK GDPR, we rely on one or more of the following lawful bases:
Contract
Where processing is necessary to enter into or perform a contract with you.
Legitimate Interests
We process personal information where it is necessary for our legitimate interests, including:
- Operating and managing Bohio Consulting.
- Delivering consultancy services.
- Responding to enquiries.
- Maintaining client relationships.
- Improving customer experience programmes.
- Conducting workshops, events and training.
- Developing and improving our services.
- Maintaining business records.
- Ensuring information security.
- Managing and growing our business.
We only rely on legitimate interests where we have considered and balanced any potential impact on your rights and freedoms.
Consent
Where required, we will obtain your consent before processing personal information, particularly for marketing activities or special category data.
You may withdraw your consent at any time.
Legal Obligation
Where processing is necessary to comply with legal, regulatory, accounting or tax obligations.
Marketing Communications
We may send newsletters, service updates, event invitations and marketing communications where:
- You have consented to receive them; or
- We are otherwise permitted to do so under applicable law.
You can opt out at any time by:
- Clicking the unsubscribe link contained in any marketing email; or
- Contacting racquel@bohioconsulting.com.
Unsubscribing from marketing communications will not affect essential service-related communications.
Website Analytics and Cookies
Our website uses cookies and similar technologies to:
- Improve website functionality.
- Understand visitor behaviour.
- Analyse website traffic.
- Improve user experience.
- Measure marketing effectiveness.
We currently use:
- Google Analytics
Google Analytics helps us understand how visitors use our website by collecting anonymised and aggregated data regarding website usage.
You can control cookies through your browser settings and any cookie management tools provided on our website.
Artificial Intelligence and Technology
We may use business systems that incorporate artificial intelligence features to improve operational efficiency and service delivery.
Where personal information is processed through such systems, we ensure appropriate contractual, organisational and technical safeguards are in place.
We do not permit third-party providers to use our client data for the training of public artificial intelligence models unless we have a lawful basis for doing so and have informed affected individuals accordingly.
We do not carry out solely automated decision-making or profiling that produces legal or similarly significant effects on individuals.
Who We Share Information With
We may share personal information with carefully selected third-party service providers who support the delivery of our services and business operations.
These may include:
Microsoft 365
Used for email, document management, collaboration and secure business communications.
HubSpot
Used for customer relationship management (CRM), marketing communications, lead management and business administration.
Google Analytics
Used for website analytics and performance monitoring.
Xero
Used for accounting, invoicing, bookkeeping and financial administration.
Buffer
Used for social media scheduling, management and analytics.
Professional Advisers
Including:
- Accountants
- Legal advisers
- Business consultants
- Insurance providers
We only share personal information where necessary and require third parties to maintain appropriate privacy, confidentiality and security standards.
International Data Transfers
Some of our service providers may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, we ensure appropriate safeguards are in place, including:
- UK adequacy regulations;
- International Data Transfer Agreements (IDTAs);
- Standard Contractual Clauses; or
- Other legally approved transfer mechanisms.
These safeguards are designed to ensure your personal information receives a level of protection equivalent to that required under UK data protection law.
Information Security
We implement appropriate technical and organisational measures to protect personal information, including:
- Secure cloud-based systems.
- Access controls and user permissions.
- Password protection and multi-factor authentication where available.
- Secure storage and transmission methods.
- Regular software updates.
- Staff confidentiality obligations.
- Data breach response procedures.
While no method of transmission or storage is completely secure, we take reasonable steps to safeguard personal information against unauthorised access, disclosure, loss or misuse.
Personal Data Breaches
In the event of a personal data breach, we will follow applicable legal obligations relating to:
- Investigation;
- Risk assessment;
- Containment;
- Notification to affected individuals where required; and
- Reporting to the Information Commissioner’s Office where legally necessary.
Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.
Our typical retention periods include:
| Category | Retention Period |
|---|---|
| Client records | Up to 6 years following completion of services |
| Financial and accounting records | Minimum 6 years |
| Business enquiries not converted into clients | Up to 24 months |
| Marketing records | Until consent is withdrawn or records become inactive |
| Website analytics information | In accordance with platform settings and business requirements |
We may retain information for longer where required by law, insurance obligations or legitimate business interests.
Your Data Protection Rights
Under UK GDPR, you have the right to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of your personal information.
- Request restriction of processing.
- Object to processing.
- Request data portability.
- Withdraw consent where consent is relied upon.
To exercise any of these rights, please contact:
racquel@bohioconsulting.com
We aim to respond within one month of receiving a valid request.
Data Protection Complaints Procedure
Individuals may submit a data protection complaint directly to Bohio Consulting by contacting racquel@bohioconsulting.com with the subject line:
“Data Protection Complaint”
We will acknowledge complaints promptly and investigate concerns in accordance with our internal Data Protection Complaints Procedure.
Where necessary, we may request additional information to properly investigate the complaint.
Following our investigation, we will provide a response outlining our findings and any actions taken.
If you remain dissatisfied after receiving our response, you may escalate your complaint to the Information Commissioner’s Office.
Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, policies or content of external websites. We encourage you to review the privacy notices of any third-party websites you visit.
How to Complain
If you have concerns about how we use your personal information, please contact us first:
Email: racquel@bohioconsulting.com
Registered Office:
190 Billet Road
Walthamstow
London
E17 5DX
You also have the right to complain to the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/
Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in:
- Applicable laws and regulations;
- Regulatory guidance;
- Technology;
- Business operations; or
- Data processing activities.
The latest version will always be available through our website.
Where changes are significant, we may notify affected individuals directly where appropriate.
