Privacy Policy

How we collect, use, and protect your information.

Last updated: March 2026

1. Who we are

This website is operated by Haresign Consulting Services, a sole trader consulting business providing practice and business management consulting for GP practices and Primary Care Networks across England. The data controller is Ben Haresign. You can contact us at [email protected].

2. What data we collect

We collect personal data only in two ways:

Contact form submissions. When you use the contact form on this site, we collect your name, email address, an optional subject, and the message you write. This information is transmitted to us by email and used solely to respond to your enquiry.

Analytics data. If you accept analytics cookies, we use Google Analytics (GA4) to collect anonymised information about how visitors use this site — pages viewed, time on site, approximate location (country/region), and device type. This data does not identify you personally. Google Analytics is operated by Google LLC; their privacy policy is available at policies.google.com/privacy.

3. Cookies

This site uses two categories of cookie:

Essential cookies. A CSRF security token is set automatically by Django to protect form submissions from cross-site request forgery. This cookie is strictly necessary for the site to function securely and does not require consent.

Analytics cookies. Google Analytics sets cookies (including _ga and _ga_*) to distinguish users and track sessions. These are only set if you click "Accept" on the cookie banner. You can withdraw consent at any time by clearing your browser cookies and declining on your next visit.

4. Legal basis for processing

Contact form data is processed on the basis of legitimate interests — to respond to an enquiry you have initiated.

Analytics data is processed on the basis of your consent, given via the cookie banner on your first visit.

5. How we use your data

Contact form data is used only to reply to your message. We do not add you to any mailing list, pass your details to third parties, or use them for marketing without your explicit agreement.

Analytics data is used to understand which content is useful and how to improve the site. It is not shared with third parties beyond Google Analytics' own processing.

6. Data retention

Contact form submissions are retained in email for as long as they remain relevant to an enquiry or relationship, and deleted when no longer needed. Google Analytics data is retained for 14 months by default, after which it is automatically deleted by Google.

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Withdraw consent for analytics at any time
  • Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, email [email protected].

8. Third-party services

This site loads content from mypracticeconnect.co.uk for blog articles and calculator tools. PracticeConnect's own privacy policy governs any data processed on that platform. Google Fonts are loaded from Google's CDN; Google may collect usage data as described in their privacy policy.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after an update constitutes acceptance of the revised policy.

Questions about this policy? Email [email protected].