Privacy policy
Last updated
This policy explains what information GHS Consulting collects when you use ghsconsulting.io or engage us for services, how that information is used, and the rights you have over it. It applies to this website and to our client work.
1. Who we are
GHS Consulting provides business systems and process automation services. For the purposes of data protection law we act as a controller for information collected through this website and our own business correspondence, and as a processor for personal data we handle inside a client’s systems during an engagement. You can reach us at ibrahim@ghsconsulting.io.
2. Information we collect
We collect only what we need to answer you and to run the engagement:
- Contact details you give us, such as your name, business name, email address and phone number.
- Booking information you submit through our scheduling provider when you reserve an audit, including the time you choose and any notes you add.
- Correspondence between us, including email and messages sent during a project.
- Business information you share so we can carry out an audit or build, such as how your enquiries are handled and which tools you use.
- Basic technical information from your visit, such as page requests, referring page and approximate location derived from your IP address.
3. Why we use it
To reply to enquiries, hold the audit you booked, prepare and deliver a proposal, perform the contracted work, invoice you, keep the records we are required to keep, and secure and improve the website. Where the law requires a lawful basis, we rely on your consent for optional communications, on the performance of a contract for client work, and on our legitimate interests in operating and protecting the business for the remainder. We do not sell personal information, and we do not use it to build advertising profiles.
4. Client data during an engagement
Our work usually takes place inside systems you own and control. Where we are given access to your customer records, inboxes, calendars or payment tools, we use that access only to perform the agreed work, we scope it to what the build requires, and we ask you to revoke it when the engagement ends. We do not copy client customer data out of your systems except where a specific step of the build requires it, and we do not use it to train any model of our own.
5. Service providers
We rely on third parties to run the business, including a website host, an email provider, a scheduling provider for audit bookings, and the automation and communications platforms used to build client systems. These providers process information on our instructions under their own terms and security commitments. Some are located outside your country, and where personal data is transferred internationally we rely on the transfer mechanisms those providers put in place. We will name the current providers on request.
7. How long we keep it
Enquiries that do not become engagements are deleted within twelve months. Client records, contracts and invoices are kept for as long as the relationship lasts and then for the period our tax and accounting obligations require. Access credentials are removed at the end of a project.
8. Your rights
Depending on where you live, you may ask us for a copy of the personal information we hold about you, ask us to correct or delete it, object to or restrict certain uses, ask us to transfer it, and withdraw consent for optional communications at any time. Write to ibrahim@ghsconsulting.io and we will respond within one month. If you are unhappy with our response you may complain to your local data protection authority.
9. Security
We use reputable providers, limit access to what each person needs, protect accounts with multi-factor authentication where it is available, and remove access promptly when it is no longer required. No transmission or storage method is completely secure, and we cannot guarantee absolute security.
10. Children
Our services are sold to businesses. We do not direct this website to children and we do not knowingly collect information from anyone under sixteen.
11. Changes
If we change this policy we will update the date above. Material changes affecting current clients will be sent to them directly. Related terms are set out in our terms of service.