Privacy Policy
Last updated: 1 March 2026. This policy explains what personal data Business Lunch & Learn collects, why, and the rights you have under UK data protection law.
Who is responsible for your data
Business Lunch & Learn is an independent knowledge resource run by David Ward. For the purposes of UK GDPR and the Data Protection Act 2018, Business Lunch & Learn is the data controller for the information described in this policy. You can reach us at hello@businesslunchandlearn.com.
What we collect and why
This site is designed to collect as little data as possible. The information we may hold is:
- Messages you send us. If you use the contact form or email us, we receive your name, email address, company details and message. We use this only to respond to your enquiry and, with your agreement, to follow up on the topic you raised.
- Usage data. Like most websites, we may use privacy-respecting analytics to understand which pages are read and how people find the site. This data is aggregated and does not identify individual visitors.
We do not sell personal data, rent it, or share it with third parties for marketing. We do not place advertising on this site.
Lawful basis for processing
Under UK GDPR, we process the personal data you send us on the basis of:
- Consent, when you choose to contact us and provide your details.
- Legitimate interest, for basic site security and the operation of the website itself.
Cookies
This site does not use advertising or tracking cookies. It may use small, essential cookies or local storage to remember basic preferences, such as whether you have dismissed a notice. Where third party services such as font delivery or icon libraries are loaded from a CDN, those providers may process technical data such as your IP address in line with their own privacy policies.
How long we keep data
Messages and correspondence are kept only for as long as needed to deal with your enquiry, normally no longer than 24 months after the conversation ends. Aggregated usage statistics are kept for as long as they are useful for understanding how the site is read, and no longer.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data.
- Object to or restrict processing in certain circumstances.
- Lodge a complaint with the Information Commissioner's Office if you believe we have not handled your data properly.
To exercise any of these rights, email hello@businesslunchandlearn.com and we will respond within one month.
Security
This site is served over HTTPS, and the small amount of personal data we hold is kept in secured, access-controlled storage. We use the same discipline in handling your information that the site's guides recommend for your systems.
Third party links
The guides link to external resources such as GOV.UK, the NCSC and professional bodies. Those sites have their own privacy policies, and this policy does not apply once you leave businesslunchandlearn.com.
Changes to this policy
If this policy changes, the updated version will appear on this page with a new date. Significant changes will be flagged in the monthly update note on the home page.