GDPR statement.

1. Lawful basis for processing

Intervene Limited processes personal data on two lawful bases under UK GDPR Article 6:

• Legitimate interests (Art. 6(1)(f)). To respond to professional enquiries directed at the practice and to determine whether an engagement is appropriate.
• Performance of a contract (Art. 6(1)(b)). To deliver a contracted advisory engagement to a client organisation.

2. Data retention

Enquiry data is retained for twelve months from the close of correspondence, then deleted. Engagement data is retained for the duration of the contract and for a period appropriate to professional record-keeping obligations following the close of the engagement, typically six years.

3. Your rights under UK GDPR

• Right of access. A copy of personal data held about you.
• Right of rectification. Correct inaccurate or incomplete data.
• Right of erasure. Subject to legal and contractual record-keeping obligations.
• Right to restrict processing. In defined circumstances.
• Right to object to processing. In defined circumstances.
• Right to data portability. For data you have provided in machine-readable form.

4. How to exercise your rights

Submit requests via the contact form. We respond within one calendar month, in line with UK GDPR. There is no fee for exercising these rights, save where a request is manifestly unfounded or excessive.

5. Supervisory authority

The supervisory authority for the United Kingdom is the Information Commissioner's Office. If you are dissatisfied with our handling of a request, you may lodge a complaint at ico.org.uk.

6. International transfers

Personal data is processed in the United Kingdom and the European Economic Area. The site's font assets are served from Google Fonts, which may involve transient transfer to Google-operated infrastructure outside the UK and EEA on request. No personal form data is transferred to Google.