Privacy Policy

Cross Check Consultancy Ltd, trading in part as Safe Space Collective

Last updated: 8 July 2026

Who we are

This notice explains how Cross Check Consultancy Ltd (‘we’, ‘our’, ‘us’) uses your personal information when you contact us, use our HR, training or mediation services, or join the waitlist for Safe Space Collective, our forthcoming platform to help UK employers prevent, and evidence action on, sexual harassment at work. Cross Check Consultancy Ltd is the data controller. Our website is www.crosscheckconsultancy.co.uk. You can contact us via https://linktr.ee/crosscheckconsultancy.

Information we collect

HR, training and mediation clients: contact, financial and employment data, usually provided by a client organisation’s representative, occasionally by the individual directly, in order to deliver the agreed service.

Safe Space Collective waitlist: first name, surname, email address, job title, industry/sector (from a list, with an ‘Other’ free-text option), organisation size band, whether you’re an independent HR consultancy, and your marketing consent tick. Signing up to the waitlist carries no cost or obligation. We publish an anonymised aggregate sign-up total (e.g. “16 Leaders have joined”) which doesn’t identify individuals. If you complete a survey, attend an FAQ session, or send us feedback, we keep a record to inform development and may share aggregated results which doesn’t identify individuals e.g. 50 leaders from education felt that an anonymous reporting service would be helpful.

Anonymous reporting services are available through a separate, independent partner organisation under their own agreement and their own privacy notice. They, not us, will act as the data controller for reports made through that service. Any information you or your employees submit to that service will be handled under the partner’s own terms, not this policy. We’ll update this notice with the partner’s name and a link to their privacy notice once that arrangement is confirmed.

We also collect website analytics (see ‘Cookies’) and, for consultancy/mediation work only, occasional special category data (e.g. health information relevant to a case). We do not expect to collect special category data via the waitlist.

Our lawful basis

• Contract to deliver services you’ve engaged us for.
• Consent for waitlist marketing updates (tick box) and general enquiries. You can withdraw this anytime via the unsubscribe link or by contacting us, without affecting anything done before withdrawal.
• Legitimate interests, administering the waitlist accurately, and engaging with prospective/current clients.

Special category data additionally requires a further basis typically explicit consent, legal claims, or your having made the information public.

Keeping your data safe

We have technical and organisational safeguards in place, and our associates are trained on data protection and confidentiality. Third-party processors (currently Brevo, and our website/forms host and any CRM or email tool for the waitlist) may only process data on our instructions and cannot share it further. Data is generally held in the UK/EEA; any transfer abroad relies on an appropriate safeguard recognised under UK law, including the ‘data protection test’ introduced by the Data (Use and Access) Act 2025. We have breach-response procedures in place, as legally required.

How long we keep it

We keep data only as long as necessary for the purpose collected, or as law requires. Waitlist data is kept while the waitlist is open plus a reasonable period afterwards; if you unsubscribe, or the platform doesn’t proceed, we delete or anonymise it (bar a minimal record of your unsubscribe request). Website comments and their metadata are kept indefinitely to manage follow-up comments automatically.

Sharing your information

We only share data to deliver our contracted services, with your permission, or where the law requires it e.g. with your allocated associate, our Directors, administrators (need-to-know basis), our processors above, under a court order, or in a business restructure. All processors are contractually bound to our instructions.

Your rights

You have the usual UK GDPR rights: to be informed, of access, rectification, erasure, restriction, portability, and to object (e.g. to marketing or simply withdraw consent). You also have rights around solely automated decision-making, though we don’t currently use this.

Right to complain to us directly: since 19 June 2026 (Data (Use and Access) Act 2025), you can complain to us if you think we’ve mishandled your data. We’ll acknowledge within 30 days, investigate, and keep you updated, no particular wording needed, just tell us. You can also complain to the ICO at any time, whether or not you complain to us first.

To exercise any right or request a copy of your data, contact us via https://linktr.ee/crosscheckconsultancy. We aim to respond within one calendar month and may ask you to verify your identity.

We use Google Analytics cookies (statistical purposes only, not used to identify you), plus functional cookies for comments, logins and editing. Since 5 February 2026, low-risk analytics/functional cookies no longer require prior consent under the DUAA, provided we give clear information and a clear opt-out which we do, via our cookie settings. Strictly necessary/security cookies remain exempt from opt-out. PECR fines for cookie/marketing breaches have increased substantially and now align with UK GDPR levels. More at www.aboutcookies.org.

Other websites and embedded content

We aren’t responsible for the privacy practices of sites we link to, or third-party content embedded on ours. An anonymised hash of your email may be checked against Gravatar (see https://automattic.com/privacy/); approved comments show your Gravatar photo publicly.

Complaints

Raise concerns with us first via https://linktr.ee/crosscheckconsultancy. You can otherwise, or additionally, complain to the ICO: www.ico.org.uk, or by post to Customer Contact, Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF.