Privacy Statement
Introduction
Illuminate Governance is the trading name of freelance Charity Adviser and Governance Consultant, Lynn Cadman (also referred to in this Privacy Statement as “Illuminate Governance”, “we” and “us”).
This privacy statement explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please note that by continuing to use our services or this Website and by providing any personal data to us offline, via this Website, or via any email addresses provided on this Website you are consenting to our use of your personal data as set out in this Privacy Statement. Please do not provide us with any personal data if you do not want that data to be used by us in this manner.
1. What personal data we collect
This information might include:
- Your name, email address and other contact details
- Records of your correspondence with us
- Diversity data that you have provided, or consented to a third party providing, or which is publicly available
- Your bank account details and/or other billing details
2. Why we collect your data
We collect and process your personal data for the following purposes:
- To respond to your enquiries or requests
- To provide our consultancy and training services to you
- To invoice you for services we have provided to you
- To keep records of the work we have carried out for you
- For marketing and communication purposes
- To comply with legal and regulatory obligations
- To improve our website and user experience through cookies
3. The legal basis for processing your data
We rely on the following legal bases to process your personal data:
- We have the individual’s consent to process their personal data (as above, by using our services or this Website an individual consents to our use of their personal data as set out in this Privacy Statement).
- To enable us to perform a contract, or to take steps at your request before entering a contract.
- To comply with the law (for example, maintaining accounting records).
- For our legitimate interests, or the legitimate interests of a third party (unless there is a good reason to protect an individual’s personal data which overrides those legitimate interests).
4. Disclosure of your data
We will not disclose your personal data to any third party except in the following circumstances:
- Where required as part of the delivery of services to you, for example, disclosure of your data to other professionals working on the same matter.
- The use of a third-party service provider to provide us with services that involve data processing (for example, our email service provider).
- Where we are under a duty to disclose or share your data to comply with any legal obligation or to enforce or apply any agreements.
- To protect the rights, property, or safety of Illuminate Governance, or others.
- Where you have expressly consented for us to share your personal data with third parties.
5. Storage of your data
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA) including in a country where the law provides less protection for personal data. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. By continuing to use our services or this Website and by providing any personal data, you are consenting to such transfers, storing or processing of your personal data.
6. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. This includes the following retention periods for specific categories of data:
- Enquiries and contact form data: Retained for up to 3 years after last contact unless this leads to a client project.
- Client and partner contact data: Retained for the duration of the relationship, up to 6 years thereafter for legal purposes, and up to 10 years where this relates to a client project. Specific data collected during a project, such as recordings or transcripts of interviews with individuals or diversity data, may be retained for shorter periods.
- Financial and transaction data: Retained for at least 6 years in line with accounting standards and up to 10 years where this relates to a client project.
- Website usage and analytics cookie data: Retained for no longer than 3 years.
7. Your rights
You have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing by contacting us at info@illuminategovernance.co.uk.
Depending on the personal data that we hold and the circumstances, you might also have other rights, for example, to request:
- Access to any personal data that we hold about you.
- That we restrict processing of your personal data in specific circumstances.
- That we erase your personal data if it is no longer necessary in relation to the purposes for which it was collected or processed or to rectify inaccurate data or to complete incomplete data.
8. Cookies and website usage
Our website may use cookies and similar technologies to enhance your experience. You can manage your cookie preferences through your browser settings or by using the cookie preferences button on our website.
9. Links to third party websites
This Website may contain links to third party websites. If you follow a link to any third-party website, please be aware that these websites should have their own privacy policy and that we do not accept any responsibility or liability for their policies.
10. Contact
Any questions in respect of this Privacy Statement should be addressed to info@illuminategovernance.co.uk. Please also use this address if you would like to let us know that your details require updating.
11. Updates to this privacy statement
We may update this policy occasionally to reflect changes in our practices or legal obligations. Please check our website for the latest version.
Last updated: October 2026