Privacy Policy

1. Who we are

Cubic Street is a senior-led consultancy that helps growing businesses turn operational and strategic friction into clear systems, workflows, and results. We work with a small network of specialists across strategy, operations, technology, and people.

For the purposes of UK GDPR and the Data Protection Act 2018, Cubic Street Ltd is the data controller for personal data collected through this website and in the course of our consulting work. The named data controller is listed in section 11 below.

Our company registration and contact details are in Section 11.

2. What personal data we collect

We only collect data you give us or that is necessary for the site to work.

You give us directly:

• Your name, email address, phone number, company name, and the content of your message when you complete the contact form.
• Your name, email address, and any details you provide when you book a call via Calendly.
• Information you share with us during consulting engagements — typically business context, operational data, and the names and contact details of people in your organisation.

We collect automatically when you visit the site:

• Standard technical information your browser sends to any website: IP address, browser type, device type, operating system, referring URL, and pages requested. This is processed by Cloudflare to deliver the site securely and is not used to track or profile visitors.

We do not knowingly collect:

• Special category data (health, ethnicity, political views, religious beliefs, sexual orientation, etc.).
• Data about children under 16. This site is intended for business users.

We do not use website analytics. We do not run Google Analytics, Meta Pixel, or any other tracking technology on this site.

3. How we use your data, and our legal basis

We do not sell your personal data. We do not use it for automated decision-making or profiling. We do not transfer your data to third parties for marketing.

4. Who we share your data with

We use a small number of trusted service providers ("processors") to run the business. They process data on our instructions and under contract:

• Netlify — website hosting
• Cloudflare — content delivery, DNS, and security for the website
• Calendly — call scheduling
• Microsoft 365 — business email and document storage
• Mailgun — transactional email delivery (e.g. contact form notifications)

We may also share data with:

• Specialist associates and subcontractors working on your engagement. They are bound by confidentiality and data protection obligations equivalent to ours.
• Professional advisers (accountants, lawyers, insurers) where necessary.
• Authorities or regulators where required by law.

5. International transfers

Some of our service providers are based outside the UK, including in the United States and the European Economic Area. Where this is the case, we ensure transfers are protected by appropriate safeguards — typically the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision by the UK government.

6. How long we keep your data

We do not keep data longer than necessary.

• Contact form enquiries that do not lead to engagement: up to 12 months.
• Client records during an engagement, and afterwards: for the duration of the engagement and up to 7 years after, to meet legal, accounting, and contractual obligations.
• Marketing contacts: until you unsubscribe or ask us to remove your data.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you (free of charge).
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data ("right to erasure"), where applicable.
• Restrict or object to how we process your data.
• Receive your data in a portable format.
• Withdraw consent at any time, where we rely on consent.
• Complain to the Information Commissioner's Office (ico.org.uk) if you believe we have handled your data improperly. We would appreciate the chance to address your concerns first.

To exercise any of these rights, contact us using the details in Section 11. We will respond within one month.

8. Cookies

We use only essential cookies required for the site to function — for example, to keep the site secure via Cloudflare. These do not require your consent under UK law.

We do not use analytics, advertising, or tracking cookies.

Some pages embed third-party services (such as Calendly for booking calls) which may set their own cookies when you interact with them. These are governed by the providers' own privacy policies.

You can manage or block cookies through your browser settings. Blocking essential cookies may prevent parts of the site from working.

9. Security

We take reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS via Cloudflare), access controls, restricted use of credentials, and contracts with our service providers that require equivalent standards. No system is completely secure; we will notify you and, where required, the ICO if a breach affects your rights.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Material changes will be highlighted on the site or notified to clients directly.

11. Contact

Cubic Street Ltd is a company registered in England & Wales.

For any questions, requests, or concerns about your data, email us at the address below.

• Company number: 6665506
• Registered office: [loading]
• VAT number: GB-971070039
• ICO registration number: ZA052968
• Named data controller: [loading]
• Email: [email protected]