Privacy Policy

SSAS Consultant is a trading name of Raeburn Heriot Consulting Limited, a company registered in England and Wales under company number 15402863, with its registered office at 71-75 Shelton Street, London WC2H 9JQ.

For the purposes of UK data protection law, Raeburn Heriot Consulting Limited is the data controller in respect of personal data collected through this website and in the course of providing our services.

If you have any questions about this policy or how we handle your personal data, please contact us at: [email protected]

We may collect and process the following categories of personal data:

• Identity data: your name, job title, and the name of your business.
• Contact data: your email address and telephone number.
• Enquiry data: the content of any message or enquiry you submit to us through our website contact form or via email.
• Usage data: technical information about how you interact with our website, including your IP address, browser type, pages visited, and time spent on pages (collected via analytics tools where applicable).
• Communications data: records of correspondence between us, including emails and notes from telephone conversations.

We do not collect any special category personal data (such as health, financial account, or biometric data) through this website. Where the nature of our advisory services requires us to handle sensitive financial information, this is governed by a separate engagement agreement and our Terms of Business.

We collect personal data in the following ways:

• Directly from you — when you complete a contact or enquiry form on our website, send us an email, or speak with us by telephone.
• Through third-party tools — our website uses 17hats for client intake and scheduling. When you interact with a 17hats form embedded on or linked from our website, your data is also subject to the 17hats privacy policy.
• Automatically — through cookies and similar technologies when you browse our website (see Section 9 below).

We use your personal data for the following purposes and on the following legal bases:

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

We will only send you marketing communications if you have given us your consent to do so, or where we have a legitimate interest in contacting you about services similar to those you have already enquired about or engaged us for.

You may withdraw your consent or opt out of marketing communications at any time by contacting us at [email protected] or by using the unsubscribe link in any marketing email we send you.

We do not sell your personal data. We may share your personal data with the following categories of third parties:

• Service providers: third-party suppliers who provide IT, software, and administrative services to us (including 17hats for client management). These parties process data on our behalf and are bound by data processing agreements.
• Professional advisers: lawyers, accountants, and auditors where necessary in the course of our business.
• Regulatory authorities: HMRC or other regulatory bodies where we are required to disclose information by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

We are based in the United Kingdom and process personal data in the UK. Where any of our third-party service providers are based outside the UK or the European Economic Area, we ensure that appropriate safeguards are in place (such as standard contractual clauses approved by the UK Information Commissioner's Office) before transferring your data.

We retain personal data only for as long as is necessary for the purposes for which it was collected, taking into account:

• Our legal and regulatory obligations (including HMRC record-keeping requirements).
• The nature of our relationship with you — enquiry data is typically retained for up to 2 years; client engagement data is retained for a minimum of 6 years from the end of the engagement.
• Whether there is an ongoing dispute or legal claim that requires us to retain data for longer.

When personal data is no longer required, we will securely delete or anonymise it.

Our website uses cookies and similar tracking technologies to improve your browsing experience and to understand how visitors use our site. Cookies are small text files placed on your device.

We use the following types of cookies:

• Strictly necessary cookies: essential for the website to function correctly. These cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website (for example, which pages are visited most). We use this information to improve our site.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure: to ask us to delete your personal data in certain circumstances.
• Right to restrict processing: to ask us to limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format in certain circumstances.
• Right to object: to object to our processing of your data where we rely on legitimate interests as our legal basis.
• Rights in relation to automated decision-making: we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one calendar month. We may need to verify your identity before processing your request.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

We take the security of your personal data seriously and have put in place appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. However, no transmission of data over the internet is completely secure, and we cannot guarantee the security of data transmitted to our website.

Our website may contain links to third-party websites. This privacy policy applies only to our website. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies before providing any personal data to them.

We may update this privacy policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last updated. We encourage you to review this policy periodically.