Privacy Policy

1. Introduction

IM-Consulting Services Ltd (“we,” “us,” or “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data when you interact with our website (www.im-consulting.services), use our Diagnostic Application (The "App") or receive our outreach reports.

For the purposes of the UK General Data Protection Regulation (UK GDPR), IM-Consulting Services Ltd is the Data Controller.

• Registered Office: 15 Burslem Avenue, Manchester, M20 1BD.
• Data Protection & Deletion Contact Email: privacy@im-consulting.services

2. Data We Collect

We collect and process the following data:

• Directly from you via our Diagnostic Tool (App): *Your professional email address.
• Your answers to our 11 core business diagnostic questions.
• Indirectly: Financial data, company history, and director details sourced from public records including Companies House and professional databases (e.g., FAME). Specifically for the Diagnostic Tool, we match your answers with Companies House (public records) Company Number, Standard Industrial Classification (SIC/industry classification), years trading, registered region, director and Persons with Significant Control (PSC) counts.

3. Lawful Bases for Processing

Depending on your stage in our lead funnel, we rely on three distinct legal bases under the UK GDPR:

• A. Legitimate Interests (Article 6(1)(f)): Used during our initial market research and B2B cold outreach. We have a legitimate commercial interest in identifying UK SMEs facing succession challenges to offer AI-driven benchmarking. Directors have a reasonable expectation that publicly filed corporate data may be used for professional outreach. You have an absolute right to object to this processing at any time.
• B. Consent (Article 6(1)(a)):: When you interact with our Lovable App diagnostic, we obtain your explicit consent to analyse your 11 diagnostic answers alongside Companies House data to generate your "Freebie" deliverables (the EV Snapshot and Dive-in Report). You can withdraw this consent at any time.
• C. Performance of a Contract (Article 6(1)(a)): If you progress to our "Stage 2 - Consultancy & Services" (Paid Sprints), processing your data becomes strictly necessary to deliver the specific advisory services and due diligence outlined in our client agreement.

4. Data Retention and Location

We enforce strict minimization protocols regarding how long and where your data is stored:

• User Device Cache: The App utilizes a 72-hour localStorage Time-to-Live (TTL) cache on your local browser. After 72 hours, your session data is automatically wiped from your device.
• System Retention: If you request the withdrawal or deletion of your data, it will be fully expunged from the App infrastructure within 7 days.
• App & Google Workspace: All personal data managed by the App is hosted and stored exclusively within the UK and the European Union (EU). Your data is stored within encrypted Google Services, Workspace and Cloud storage.
• We retain your data only for as long as necessary to fulfill the purposes of outreach or to provide the requested services.

5. Recipients and Processors of Your Data

We do not sell your data. We only share your data with the following essential third parties to maintain app functionality and deliver reports:

• Google Cloud & Workspace: For secure cloud storage of your diagnostic metrics within encrypted Google Sheets.
• Google Services: For handling secure, transactional email delivery of your requested reports.
• Companies House: Utilized via API as an open public-data source to verify and append corporate fields.

6. Your Rights

Under the UK GDPR, you hold rights regarding access, rectification, restriction, and erasure ("Right to be Forgotten") of your data. To exercise these, contact privacy@im-consulting.services.

In compliance with the updated UK data protection frameworks active from June 2026, we operate a formalized, mandatory complaint-handling process:

• If you submit a data privacy complaint to privacy@im-consulting.services, our team will log the entry and provide a formal written acknowledgment within 30 days.
• If you remain unsatisfied with our response, you retain the right to lodge a complaint directly with the Information Commissioner’s Office (ICO).

7. Liability Limitation

Any "EV Snapshot," "Dive-in Report," or diagnostic feedback provided via this website, app, or email consists of deliverables intended strictly for educational and benchmarking purposes. They do not constitute regulated financial advice, legal counsel, or a formal business valuation. IM-Consulting Services Ltd provides these tools 'as-is' and accepts no liability for subsequent business or financial decisions made based on these outputs.