Your information. Handled with purpose.

Who is responsible for your information

Carrick Financial Health is the trading name used on this website. The business operator is the controller of personal information handled through the website and in connection with business enquiries.

The operator’s legal identity and service address are provided in proposals, engagement letters and invoices. They can also be requested using the contact details on this page.

Information we may collect

We may collect your name, organisation, job title, work email address, telephone number, the service area selected and the information you include in your message.

The website and its hosting provider may also process technical information needed to deliver and secure the site, such as an anonymous visitor identifier, browser and device information, IP address, security events and form-submission records.

Please do not send patient records, health information, employee files, identity documents, bank details or other sensitive or confidential material through the initial enquiry form.

How and why information is used

Information is used to understand and respond to your enquiry, assess whether Carrick can assist, arrange a discussion, prepare a proposal, manage an agreed engagement, maintain business records, protect the website and meet legal or professional obligations.

The legal bases normally relied on are taking steps at your request before entering into a contract, Carrick’s legitimate interests in managing proportionate business discussions and professional relationships, compliance with legal obligations and, where specifically requested, your consent.

Who may receive information

Wix provides website hosting, security and form-submission infrastructure. The business email provider is used to receive and respond to messages.

Information may be shared with professional advisers, insurers, technology providers or other service providers where this is necessary for an enquiry, an agreed engagement, security, legal compliance or the establishment, exercise or defence of legal claims. Access is limited to what is reasonably required.

International processing

Some technology providers may process information outside the United Kingdom. Where this occurs, Carrick relies on the safeguards required by UK data-protection law and the contractual or organisational measures made available by the relevant provider.

How long information is kept

Enquiry information is retained only for as long as reasonably needed to respond, consider a potential engagement, maintain appropriate business records and deal with a complaint or claim.

Records relating to an accepted engagement may be retained for longer where required by law, professional obligations, insurance arrangements or the agreed engagement terms. Information that is no longer required is deleted or securely disposed of.

Marketing and automated decisions

Submitting an enquiry does not subscribe you to marketing. Any marketing choice will be separate and can be withdrawn at any time.

Carrick does not use the website enquiry form to make solely automated decisions that have legal or similarly significant effects.

Your rights

Depending on the circumstances, you may have rights to request access, correction, erasure, restriction or a portable copy of your information, and to object to particular uses. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing.

Email hello@carrickfh.co.uk to exercise a right or raise a concern. You may also complain to the UK Information Commissioner’s Office.

• Information Commissioner’s Office complaints service