Privacy policy
Liminal Consulting Ltd is the data controller for the personal information described on this page. The company is registered in England and Wales, number 08465309, at 167-169 Great Portland Street, London W1W 5PF, and is registered with the Information Commissioner’s Office under number ZA892637. It is a one-person business run by Andy Brett, who can be contacted at andy@liminal-consulting.co.uk.
Liminal Consulting provides leadership development, organisational development, team coaching and executive coaching to organisations in the UK. This page sets out what personal information the company holds, why it holds it, how long it keeps it, and what rights individuals have over it.
Client and engagement records
Held: names, job titles, employers, work contact details, and the records of the work itself, including proposals, correspondence, invoices and delivery notes.
Purpose: delivering the work agreed with the client, and running the business behind it, including invoicing and statutory record-keeping.
Lawful basis: performance of a contract, and legal obligation for the financial records HMRC requires.
Coaching and development notes
Held: notes taken during coaching and development sessions.
Purpose: delivering the coaching or development work.
Lawful basis: performance of a contract.
Individual session notes are not disclosed to the participant’s employer, including the organisation paying for the work. Where a sponsor receives a report, it covers themes across a group, and its scope is agreed with participants before the work begins. The single exception is a serious risk to someone’s safety, in which case the participant is told first wherever that is possible.
Psychometrics
Held: questionnaire responses and the reports generated from them. These describe personality, preferences and working style. They are not clinical assessments and are not health data.
Purpose: giving feedback to the participant, and informing the coaching or development work.
Lawful basis: consent. Completing a profile is voluntary and declining carries no consequence.
Where an organisation has commissioned the work, the report is normally shared with that organisation as well as with the participant. This is ordinary practice for development programmes.
Reports are generally provided alongside a feedback conversation rather than issued on their own, because a profile read without interpretation is easy to misread. The report describes the participant, who keeps a copy, including on leaving the organisation that paid for it.
Questionnaires are completed on the publishers’ own platforms. Where outside of the UK, that transfer relies on the safeguards UK data protection law requires.
Business contacts approached about new work
Held: name, job title, employer, work email address, and a short note on what prompted the approach.
Sources, where the information did not come from the individual: purchased business contact lists, LinkedIn connections, publicly available sources such as employer websites and trade press, and email addresses derived from an employer’s standard address format, which are informed guesses rather than details anyone has supplied.
Purpose: introducing the company’s services to people who may have a professional use for them.
Lawful basis: legitimate interests. The contact is low in volume, addressed to people in their professional capacity about work falling within their role, and straightforward to stop. The assessment behind that basis is available on request.
The right to object to direct marketing is absolute. A request to stop is acted on immediately and recorded, so that it is not repeated by mistake.
Mailing list
Held: name and email address.
Purpose: occasional writing on leadership and organisational development.
Lawful basis: consent, which can be withdrawn at any time using the unsubscribe link on any message.
Website
The site uses cookies necessary for it to function. Any non-essential cookies, such as analytics, are used only where consent has been given, and declining them makes no difference to how the site works.
Who else has access
Personal information is never sold, rented, or shared for any other organisation’s marketing.
It sits within the tools used to run the business: Microsoft 365 for email, calendar and files; an accounting package and the company’s accountant; a payments provider; a project and pipeline tool; an e-signature service; and a mail platform for the mailing list. These providers process it under contract and for no other purpose. Some are based outside the UK, and those transfers rely on the safeguards UK data protection law requires.
Where an associate is engaged to help deliver a piece of work, the client is told beforehand, and only the information that person needs is shared.
How long information is kept
Client and financial records: six years after the end of the engagement.
Coaching notes and psychometric reports: two years after the end of the engagement.
Business contacts approached about work: two years from the last meaningful contact.
Mailing list: until the subscriber unsubscribes.
Records of a request not to be contacted: kept indefinitely, limited to a name, an email address and a date, because that record is what makes the request effective.
Where a report has been shared with a client organisation, that organisation holds its own copy and decides what happens to it, so a deletion request may need to be made to both.
Rights
Individuals have the right to request a copy of the information held about them, to have it corrected, to have it deleted, to restrict its use, to receive it in a portable form, and to object to how it is used. Requests go to andy@liminal-consulting.co.uk and are answered within one month, free of charge.
Where consent is the lawful basis, it can be withdrawn at any time.
No decision about any individual is made by automated means. Psychometric reports are generated automatically from questionnaire responses, but a report is not a decision: it is interpreted and discussed with the participant.
Security
Accounts are protected by multi-factor authentication, devices are encrypted and password-protected, and access is limited to Andy Brett. A breach posing a risk to individuals is reported to the Information Commissioner’s Office within 72 hours, and those affected are told directly where the risk is high.
Changes
Any change to how personal information is used will be reflected on this page, and the date below updated. Significant changes are notified directly where contact details are held.
Complaints
Complaints should be raised at andy@liminal-consulting.co.uk in the first instance. They can also be made to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, and doing so does not prevent the matter being raised with the company.
Last updated 4 September 2026.