1. About this Privacy Policy

This Privacy Policy explains how Chris Gaidhu-Withell, trading as an independent researcher, collects, uses and protects personal information when you visit this website, make an enquiry, book a consultation or otherwise contact me about my services.

I am responsible for deciding how and why your personal information is used and am therefore the data controller for the personal information I collect in connection with my services.

If you have any questions about this Privacy Policy or how your information is handled, you can contact me at:

Email: chrisgaidhuwithell@gmail.com

2. Information I collect

Depending on how you interact with me, I may collect:

• your name;

• your email address;

• your telephone number, where you choose to provide it;

• information about your organisation, project or research requirements;

• details you provide when booking a consultation;

• information contained in correspondence between you and me; and

• information you voluntarily provide when discussing a potential research or consultancy project.

Please avoid including unnecessary sensitive or confidential personal information about yourself or other people in website enquiry forms.

If information about children, families or other individuals is relevant to a commissioned research project, I will discuss appropriate arrangements for handling that information separately before the project begins.

3. How I collect your information

I may collect personal information when you:

• submit an enquiry through this website;

• contact me by email;

• book a consultation or appointment;

• communicate with me about a potential or existing project; or

• otherwise provide information to me in connection with my services.

The information you provide through this website is processed using Squarespace, which provides the website platform and associated form functionality.

Appointments and consultations are managed through Acuity Scheduling, a scheduling service provided by Squarespace.

4. How I use your information

I use personal information only where necessary for legitimate business purposes, including to:

• respond to enquiries;

• discuss your research or consultancy requirements;

• arrange and manage consultations and appointments;

• provide commissioned research, writing, evaluation or consultancy services;

• communicate with you about an existing or potential project;

• maintain appropriate business and financial records;

• administer and improve my services; and

• meet legal or regulatory obligations where applicable.

I will not use your information for purposes that are incompatible with those described in this Privacy Policy without providing appropriate information or obtaining consent where required.

5. Lawful basis for processing

Depending on the circumstances, I process personal information on one or more of the following lawful bases:

Contract or steps taken before entering into a contract
Where processing is necessary to respond to an enquiry, arrange a consultation or provide services that you have requested.

Legitimate interests
Where processing is necessary for the effective operation and administration of my independent research and consultancy practice, provided that these interests do not override your rights and freedoms.

Legal obligation
Where I need to retain or process information to comply with a legal requirement.

Consent
Where I ask for your consent for a particular use of your information, you can withdraw that consent at any time.

6. Sharing your information

I will not sell your personal information.

I may share personal information with service providers where this is necessary to operate my business and provide the services you have requested.

These may include:

• Squarespace, which provides my website and related website services; and

• Acuity Scheduling, which provides appointment scheduling services.

I may also disclose information where I am legally required to do so.

Where I work with other organisations or individuals on a particular commissioned project, any sharing of personal information will be considered on a case-by-case basis and appropriate arrangements will be put in place where required.

7. Information security

I take reasonable and appropriate steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

This includes using appropriate account security, limiting access to information where possible and taking reasonable care when storing and communicating personal information.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

8. How long I keep your information

I retain personal information only for as long as it is reasonably necessary for the purpose for which it was collected, including where necessary to meet legal, accounting or other regulatory requirements.

The length of time information is retained will depend on the nature of the information and the relationship with you.

When information is no longer required, I will take reasonable steps to securely delete or dispose of it.

9. Cookies and website information

This website is hosted using Squarespace and may use cookies and similar technologies that are necessary for the operation, security and functionality of the website.

I am not currently using Google Analytics.

Squarespace may process certain technical information about visitors as part of providing and securing its website services. Further information about Squarespace's use of cookies and data processing can be found in its own privacy and cookie information.

Where non-essential cookies or similar technologies requiring consent are used, appropriate information and consent mechanisms will be provided.

10. Your rights

Depending on the circumstances, you may have rights under UK data protection law including the right to:

• request access to the personal information I hold about you;

• ask for inaccurate or incomplete information to be corrected;

• request deletion of your personal information where there is no good reason for me to continue processing it;

• ask for processing of your information to be restricted in certain circumstances;

• object to certain processing; and

• request a copy of certain personal information in a portable format.

Where processing is based on consent, you can withdraw your consent at any time.

These rights are subject to certain legal exceptions and may not apply in every circumstance.

To exercise a right or ask a question about your personal information, contact me using the details above.

11. Complaints

If you have concerns about how I have handled your personal information, I would encourage you to contact me first so that I can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

You can find information about making a complaint on the ICO's website.

Information Commissioner's Office (ICO)

12. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my services, the way I process personal information or relevant legal requirements.

The latest version will always be published on this website.

Last updated: September 2026

Chris Gaidhu-Withell, trading as an independent researcher