Privacy Policy (Healthcare Consultancy)

Andrew Associates Limited: Healthcare Consultancy

Effective Date: 24.08.2026

 

  1. Introduction

Andrew Associates Limited (“we”, “us”, “our”) is committed to protecting your privacy and handling your data securely. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website or engage our consultancy services.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant NHS information governance expectations.

  1. Information We Collect

We may collect the following types of information:

2.1 Personal Information

  • Name
  • Email address
  • Phone number
  • Organisation details
  • Job role
  • Any information submitted through contact forms or enquiries

2.2 Project‑Related Information

For consultancy work, we may collect:

  • Drawings, models, and technical documents
  • Site information
  • Compliance data
  • Project correspondence

2.3 Technical Information

When you use our website, we may collect:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Cookies (see Cookie Policy)
  1. How We Use Your Information

We use your information to:

  • Respond to enquiries
  • Provide consultancy services
  • Prepare proposals, reports, and deliverables
  • Maintain project communication
  • Improve our website and services
  • Meet legal, regulatory, or contractual obligations

We do not sell or share your data with third parties for marketing.

  1. Legal Basis for Processing

We process personal data under the following legal bases:

  • Contractual necessity — to deliver consultancy services
  • Legitimate interests — to operate and improve our business
  • Consent — for website forms or optional communications
  • Legal obligation — where required by law or regulatory bodies
  1. Data Sharing

We may share data with:

  • Professional partners or subcontractors assisting with your project
  • IT service providers (secure hosting, email, storage)
  • Regulatory bodies if legally required

All partners are required to maintain strict confidentiality and data protection standards.

  1. Data Storage & Security

We use secure, modern systems to store and protect your data. Measures include:

  • Encrypted storage
  • Secure email and file transfer
  • Access controls
  • Regular security reviews

Project data is stored only for as long as necessary for operational, legal, or contractual purposes.

  1. Your Rights

Under UK GDPR, you have the right to:

  • Access your data
  • Request correction
  • Request deletion
  • Restrict processing
  • Object to processing
  • Request data portability

To exercise your rights, contact us using the details below.

  1. Cookies

Our website uses cookies to improve functionality and user experience. You can manage or disable cookies through your browser settings. See our Cookie Policy for details.

  1. Third‑Party Links

Our website may contain links to external sites. We are not responsible for their content or privacy practices.

  1. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website.

  1. Contact Us

For questions or data requests, please contact:

Andrew Associates Limited: Healthcare Consultancy Email:info@andrewassociates.co.uk Registered Office: First Floor 11 Cavell Grove Hucknall Notts NG15 7WD