Legal

Privacy policy

How we collect, use and protect personal information when you interact with Sami Gichki Consulting.

Last updated: 2026

1. Who we are

Sami Gichki Ltd ("we", "us", "our") is a company registered in England and Wales, company number 16352264. We are the data controller for personal information collected through this website and for our own business administration. Our role in relation to information collected during consultancy engagements may vary depending on the nature of the engagement and will be set out in the relevant agreement and participant privacy notice.

For any privacy queries, contact us at sami@samigichki.co.uk.

2. Information we collect

We may collect and process the following categories of information:

  • Contact details you provide (name, email, organisation, role).
  • Information you share in enquiries or exploratory conversations.
  • Engagement information provided during consultancy work (documents, survey responses, interview notes) under the terms of a signed agreement.
  • Technical information collected automatically when you visit the website (see our Cookies Policy).

3. How we use your information

We use personal information to:

  • Respond to enquiries and arrange exploratory conversations.
  • Deliver contracted consultancy engagements.
  • Meet our legal, regulatory and professional obligations.
  • Improve the security, performance and accessibility of this website.

4. Lawful basis

We process personal information on one or more of the following bases under UK GDPR:

  • Legitimate interests — responding to enquiries and managing our business.
  • Contract — delivering agreed consultancy engagements.
  • Consent — where explicitly given (for example, participation in a confidential survey or interview).
  • Legal obligation — where required by law or regulation.

5. Confidentiality of engagement data

Information collected during a consultancy engagement, including survey responses, interview notes and documentary evidence, is handled in accordance with the engagement agreement and relevant participant privacy notice. Findings will normally be reported at an aggregated or pattern level. Individual attribution will not be disclosed without the participant's explicit agreement, except where disclosure is required by law or is necessary in response to an immediate safeguarding or serious risk concern. Complete anonymity cannot be guaranteed where an individual may be identifiable from their role, circumstances or the information provided.

6. Sharing your information

We do not sell personal information. We share information only where necessary to deliver a contracted engagement, meet a legal obligation, or with vetted service providers acting on our instructions (for example, email or survey tooling). All processors are bound by written data protection terms.

7. Retention

We retain personal information only for as long as necessary for the purpose for which it was collected and in accordance with applicable contractual, legal and regulatory requirements. Retention periods vary according to the type of information. Business, contractual and financial records may be retained for up to six years. Retention periods for survey responses, interview recordings, interview notes and other participant evidence will be defined for each engagement, after which the information will be securely deleted or anonymised.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion where applicable.
  • Object to or restrict processing.
  • Withdraw consent, where consent is the lawful basis.
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

9. Security

We apply appropriate technical and organisational measures to protect personal information from loss, misuse or unauthorised access. No transmission over the internet can be guaranteed as fully secure, and any transmission is at your own risk.

10. Data protection registration

Sami Gichki Ltd is registered with the Information Commissioner's Office. Registration reference: ZC080901.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the most recent revision.

12. Contact

Questions or requests can be sent to sami@samigichki.co.uk.