Privacy Policy — Grand Oak Advisory

Effective date: June 2025. Last updated: June 2025.

1. Who We Are

Grand Oak Advisory is a B2B advisory firm founded in 2025 and operating from the United Kingdom. We provide revenue advisory, AI implementation, and go-to-market advisory services to businesses. Our website is grandoakadvisory.com. For any data-related enquiries, please contact us at marie@grandoakadvisory.com.

2. Information We Collect

We collect personal data only when you choose to provide it. The primary source is our contact form, which requests your name, company name (optional), email address, and a message describing your enquiry. We do not collect payment card data, sensitive personal data, or any data from individuals under the age of 16.

Our website hosting infrastructure may also collect standard server log data including IP addresses, browser type, device type, and pages visited. This information is used solely for the operation, security, and performance of the website and is not used to identify individual visitors.

3. How We Use Your Information

Information submitted via the contact form is used solely to:

Review and respond to your enquiry
Assess whether and how Grand Oak Advisory can assist your business
Follow up on previous communications at your request

We do not use your contact information for unsolicited marketing or promotional communications. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Third-Party Data Processors

To operate this website and handle enquiries, we work with the following third-party processors who may handle your data on our behalf:

Vercel — website hosting and infrastructure. Data may be processed on servers in the United States and European Union. See Vercel's privacy policy at vercel.com/legal/privacy-policy.
Resend — transactional email delivery, used to transmit contact form submissions to our team. See Resend's privacy policy at resend.com/legal/privacy-policy.

Each processor is contractually obligated to handle your data securely and in accordance with applicable data protection law.

5. Data Retention

We retain contact enquiry data for a maximum of 24 months from the date of submission, unless an ongoing engagement or legal obligation requires retention for a longer period. You may request deletion of your personal data at any time by writing to us at marie@grandoakadvisory.com.

6. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your personal data
Right to restriction — to request that we limit how we process your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to our processing of your personal data

To exercise any of these rights, please contact us at marie@grandoakadvisory.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully.

7. Cookies

This website does not use analytics, advertising, or tracking cookies. Minimal functional data may be stored by our hosting infrastructure for the purposes of security and site performance. No consent is required for strictly necessary functional data of this kind, and no personal data is processed for marketing purposes through cookies.

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. All data transmitted between your browser and this website is encrypted via HTTPS.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our data practices or applicable law. The effective date at the top of this page will be updated when changes are made. Continued use of this website following any update constitutes acceptance of the revised policy.

10. Contact

For any questions, requests, or concerns relating to this privacy policy or our data practices, please contact us at marie@grandoakadvisory.com.