Privacy
Privacy notice
This notice explains what happens to your personal data when you use the enquiry forms on this site. It does not cover anything else, because nothing else on this site collects personal data.
Last reviewed 31 August 2026.
Who we are
ON Consulting Limited (company number 14937288, registered in England and Wales) is the data controller for the information described in this notice. Our registered and postal address is c/o Inni Accounts, Unit 1 Derwent Business Centre, Clarke Street, Derby DE1 2BU.
You can reach us about anything in this notice at hello@on-consulting.uk.
What this notice covers
Three forms on this site collect personal data: the general enquiry form on /contact, the referral-partner enquiry on /partners, and the sub-consultant enquiry on /join-on. Each is described below. Nothing else on this site - no account, no login, no e-commerce - asks you for personal information.
What we collect
The general enquiry form (/contact) asks for your name, email address, company name, what your enquiry is about, your timing, a short written brief, and whether you would rather we called you.
The referral-partner form (/partners) asks for your name, email address, firm name, the type of firm you are, and where you think the overlap is.
The sub-consultant form (/join-on) asks for your name, email address, discipline, how you would like to work with us, a LinkedIn or website link, and two deals you have led.
Every form also carries a field that is invisible to a real visitor and left blank by one - it exists only to catch automated spam, and a filled-in copy is discarded rather than acted on. We also use the IP address your submission came from, purely to stop the same address submitting the form an unreasonable number of times in a short period. We do not store that address: it is converted into a one-way code, and only that code is held in the server's memory, for around an hour, so repeat submissions can be recognised. The code is not attached to your enquiry and never reaches the inbox your enquiry is sent to. It is not stored in any database and does not survive the server restarting.
Why we collect it, and our lawful basis
We collect this information because you have chosen to send it to us, in order to have a conversation about instructing us, referring work to us, or working with us. Our lawful basis under UK GDPR is legitimate interests (Article 6(1)(f)): responding to a business enquiry that you initiated is a reasonable and expected use of the information you gave us for exactly that purpose, and it does not override your own interests or rights.
How your enquiry reaches us
Your submission is sent as an email, via Resend (an email-delivery service we use as a data processor), to an ON Consulting inbox that our team monitors. Your email address is set as the reply-to address, so whoever picks up your enquiry can reply to you directly rather than the message going anywhere else first.
We do not store your enquiry in a database of our own. If sending fails, we log that it failed together with your name and email address only, so we can follow up manually - never the content of what you wrote.
How long we keep it
We keep enquiry emails, and documents we hold digitally, for as long as we may need them. In a professional practice that is a long time. We may have to show what we advised and when, years after a matter has closed, and a claim can be brought long after the work itself is finished. We do not set an automatic deletion date for either.
If you want us to delete what we hold about you, ask us and we will, unless we are required to keep it. See "Your rights" below.
Who we share it with
Resend, to deliver the email, and the ON team member who ends up handling your enquiry. We do not sell your data, and we do not share it with anyone else.
Cookies and analytics
This site does not use cookies to identify you. See our Cookies page for what the site's analytics does collect.
Your rights
Under UK GDPR you can ask us to confirm what personal data we hold about you, to correct it, to delete it, to restrict how we use it, to object to our use of it, or to receive a copy of it in a portable format. Email hello@on-consulting.uk and we will deal with your request.
How to complain
If you are unhappy with how we have handled your personal data, tell us first - see our Complaints page. You can also complain directly to the UK's data protection regulator, the Information Commissioner's Office (ICO), at any time: ico.org.uk, or by telephone on 0303 123 1113.