Privacy notice

Last updated: 28 September 2026

Who is responsible

Innovative Access and Evidence Ltd, trading as IAE Consults (‘IAE’, ‘we’ or ‘us’), is the data controller for the personal information described in this notice. This means IAE decides why and how that information is used. Contact enquiries@iaeconsults.co.uk with a privacy question or request about your information.

This notice covers our website and initial enquiries. Where a client engagement or a separate community activity involves additional personal information, the relevant privacy information and arrangements will be provided before that processing begins.

Information we use and why

We use the contact details and short outline you provide to respond to your enquiry, consider organisational support, answer a general information question or discuss community participation or charity support. We keep proportionate correspondence and follow-up records. Technical website request logs are held separately to support operation and security of the website.

For ordinary enquiries, we rely on our legitimate interests in responding to contact you have chosen to make, considering the requested support and maintaining appropriate follow-up records, balanced against your privacy. Protecting our website and communications also serves our legitimate interests in operating a reliable and secure service.

A brief outline and a way to reply are enough to start. Organisation, country, timing and preferred format are optional. Providing information is your choice, although we may be unable to respond without an outline and a reply route. Please do not include patient names, medical records, personal health details or confidential third-party documents. Ask about appropriate arrangements before sharing sensitive information.

How an enquiry reaches us

The website’s enquiry tool prepares a draft in your chosen email application. It does not submit your outline to a website database or upload attachments. Your email provider may process the draft when you open it. Nothing is sent to IAE until you choose to send it.

Messages are sent to IAE’s shared enquiries mailbox and reviewed by IAE. Replies, follow-up and closure are currently managed in that mailbox. Initial enquiry correspondence is not currently imported automatically into our customer relationship records or processed using AI. Sending an enquiry does not add you to a marketing list.

Service providers and international processing

We use business email and email administration services, website hosting, website security and content delivery services. These providers process information needed to deliver their services. Hosting services keep website request logs, including archived copies.

Our providers operate internationally, so information may be processed outside the UK. Their published data protection terms describe contractual transfer safeguards, including UK transfer terms where required. Contact IAE for information about the providers and safeguards relevant to your information, and how to obtain a copy.

Any specialist involvement or separate project requires appropriate arrangements before information is shared. An initial enquiry does not itself authorise disclosure to a specialist.

Community participation and marketing

We use information for the purpose of your enquiry. An email is not anonymous. Contacting IAE does not authorise publication of your identity or contribution. The purpose, participation arrangements, attribution and proposed use are discussed before recording or publication.

How long we keep information

We normally delete routine enquiries that do not become engagements or continuing activities six months after they are closed, and sooner where the information is no longer needed. Active conversations are kept while needed for their purpose. Necessary records transferred into client or community work follow the relevant project arrangements.

Before deletion, we check whether information is still needed for an ongoing activity, rights request, complaint, incident or justified preservation hold. These requirements may affect when particular records can be deleted.

Deleting information from the live mailbox may leave a recoverable, archive or backup copy. These copies have separate arrangements for recovery, security and applicable legal holds; they are not used to extend routine follow-up. Website request logs are held separately from enquiry correspondence. Contact IAE about the retention of a particular record or a deletion request.

Your rights

You can ask for access to your personal information and for inaccurate information to be corrected. You may also request deletion, restriction or portability where the relevant conditions apply. The rights available depend on the circumstances and the lawful basis for processing. If we rely on your consent for a particular use, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Your right to object

You can object to processing based on our legitimate interests. Contact enquiries@iaeconsults.co.uk and explain your request so that IAE can consider it. You can object to any direct marketing at any time.

You can raise a concern with IAE using the same address. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/.

Changes to this notice

We will review this notice as our services and processing arrangements develop. Material changes to how personal information is used will be explained before the new processing begins. The date above identifies the latest revision.