PRIVACY POLICY

Effective Date: June 2026

1. Introduction

Mark Woodruff Consultancy (“MWC”, “we”, “us”, or “our”) is committed to protecting the privacy and security of your corporate and personal data. We operate exclusively as a B2B advisory firm. This Privacy Policy outlines how we collect, use, and protect information gathered through our digital storefront (https://markwoodruff.co.uk/) in accordance with standard United Kingdom data protection regulations (UK GDPR and the Data Protection Act 2018).

2. Data Collection

We collect specific information when you engage with our Contact Gateway to discuss a mandate or fractional board appointment. This data is strictly limited to the information required to evaluate and execute a commercial engagement.

Data collected includes:

  • Full Name

  • Corporate Email Address

  • Company / Institution Name

  • Nature of the Mandate (e.g., AI Governance, Actuarial Counsel, Fractional Advisory)

  • Overview of the Enquiry

We also collect standard technical data (such as IP addresses and browsing metrics) to ensure the secure and efficient operation of our digital infrastructure.

3. Use of Information

Information provided to MWC is used exclusively for the following commercial purposes:

  • To assess structural friction and evaluate potential B2B mandates.

  • To communicate regarding fixed-term projects, advisory retainers, or strategic sessions.

  • To distribute requested B2B Commercial Briefings and Strategic Insights.

  • To maintain the strict security and structural integrity of our digital platform.

We do not engage in retail consumer marketing. Your data will never be sold to third parties.

4. Data Governance and Retention

We apply rigorous structural governance to your data. Information is stored securely and retained only for as long as is necessary to fulfill the commercial objective for which it was collected, or to comply with overarching legal and regulatory reporting obligations.

5. Your Rights

Under standard UK data protection frameworks, you maintain absolute control over your personal data. You possess the right to:

  • Request a copy of the data we hold regarding you or your institution.

  • Request the rectification of inaccurate data.

  • Request the erasure of your data, subject to overarching legal retention requirements.

  • Object to or restrict the processing of your data.

To exercise these rights, please contact us directly using the details provided below.