Privacy notice

Last updated: 12 October 2026

Who is responsible

Innovative Access and Evidence Ltd, trading as IAE Consults (‘IAE’, ‘we’ or ‘us’), is the data controller for the personal information described in this notice. This means IAE decides why and how that information is used. Contact enquiries@iaeconsults.co.uk with a privacy question or request about your information.

This notice covers our website and initial enquiries. Where a client engagement or a separate community activity involves additional personal information, the relevant privacy information and arrangements will be provided before that processing begins.

Information we use and why

We use the contact details and short outline you provide to respond to your enquiry, consider organisational support, answer a general information question or discuss community participation or charity support. We keep proportionate correspondence and follow-up records. Technical website request logs are held separately to support operation and security of the website.

For ordinary enquiries, we rely on our legitimate interests in responding to contact you have chosen to make, considering the requested support and maintaining appropriate follow-up records, balanced against your privacy. Protecting our website and communications also serves our legitimate interests in operating a reliable and secure service.

A brief outline and a way to reply are enough to start. Organisation, country, timing and preferred format are optional. Providing information is your choice, although we may be unable to respond without an outline and a reply route. Please do not include patient names, medical records, personal health details or confidential third-party documents. Ask about appropriate arrangements before sharing sensitive information.

How an enquiry reaches us

The website’s enquiry tool prepares a draft in your chosen email application. It does not submit your outline to a website database or upload attachments. Your email provider may process the draft when you open it. Nothing is sent to IAE until you choose to send it.

Messages are sent to IAE’s shared enquiries mailbox and reviewed by IAE. Replies, follow-up and closure are currently managed in that mailbox. Initial enquiry correspondence is not currently imported automatically into our customer relationship records or processed using AI. Sending an enquiry does not add you to a marketing list.

Optional website analytics

With your consent, IAE Consults uses Google Analytics to understand clicks on downloadable resources, preparation of email drafts and requests to open an email application. These actions do not tell us whether an email was sent, received or qualified. Copying a draft does not create an analytics event.

Analytics starts only when you choose Accept analytics. Declining does not prevent you from using the website or enquiry tool. Your choice applies to the current page. Use Analytics preferences to withdraw at any time. After withdrawal, analytics stays off for that page visit. To make a new choice, save any draft before reloading or opening another page.

We do not send your name, email address, message, form entries or customer User ID to Google Analytics. Our event code substitutes fixed website information for page-specific URLs, titles and referrals. Google uses pseudonymous browser and session identifiers and technical browser and network information. This information is not anonymous. We do not use this integration for personalised advertising, Google signals, user-provided data matching or identification across devices.

Google Analytics uses the cookies _ga and _ga_4PV3BR2YFT, configured to last up to 60 days without renewal on each visit. User and event data retention is set to two months, without resetting on new activity. Most aggregated reports are outside these retention controls. Withdrawal stops new collection from this integration and removes its cookies; it does not undo earlier processing or recall requests already sent.

Google processes analytics information to provide the service under its data processing terms. Its infrastructure and subprocessors operate internationally, including outside the UK. Google’s published international transfer information explains its contractual safeguards. Contact IAE using the privacy contact in this notice to ask about applicable safeguards, copies of the relevant terms or your information rights.

Service providers and international processing

We use business email and email administration services, website hosting, website security and content delivery services. These providers process information needed to deliver their services. Hosting services keep website request logs, including archived copies.

Our providers operate internationally, so information may be processed outside the UK. Their published data protection terms describe contractual transfer safeguards, including UK transfer terms where required. Contact IAE for information about the providers and safeguards relevant to your information, and how to obtain a copy.

Any specialist involvement or separate project requires appropriate arrangements before information is shared. An initial enquiry does not itself authorise disclosure to a specialist.

Community participation and marketing

We use information for the purpose of your enquiry. An email is not anonymous. Contacting IAE does not authorise publication of your identity or contribution. The purpose, participation arrangements, attribution and proposed use are discussed before recording or publication.

How long we keep information

We normally delete routine enquiries that do not become engagements or continuing activities six months after they are closed, and sooner where the information is no longer needed. Active conversations are kept while needed for their purpose. Necessary records transferred into client or community work follow the relevant project arrangements.

Before deletion, we check whether information is still needed for an ongoing activity, rights request, complaint, incident or justified preservation hold. These requirements may affect when particular records can be deleted.

Deleting information from the live mailbox may leave a recoverable, archive or backup copy. These copies have separate arrangements for recovery, security and applicable legal holds; they are not used to extend routine follow-up. Website request logs are held separately from enquiry correspondence. Contact IAE about the retention of a particular record or a deletion request.

Your rights

You can ask for access to your personal information and for inaccurate information to be corrected. You may also request deletion, restriction or portability where the relevant conditions apply. The rights available depend on the circumstances and the lawful basis for processing. If we rely on your consent for a particular use, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Your right to object

You can object to processing based on our legitimate interests. Contact enquiries@iaeconsults.co.uk and explain your request so that IAE can consider it. You can object to any direct marketing at any time.

You can raise a concern with IAE using the same address. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/.

Changes to this notice

We will review this notice as our services and processing arrangements develop. Material changes to how personal information is used will be explained before the new processing begins. The date above identifies the latest revision.