Privacy Notice & GDPR

This notice explains how Latitude Management Services Limited collects, uses, stores, and protects personal data in connection with its business consultancy services and website.

1) Who we are

Latitude Management Services Limited is a UK B2B management consultancy supporting law firms and regulated professional services organisations with strategic, operational, compliance, mediation, process-support, and technology advisory work.

2) What personal data we collect

Contact details (such as name, business email, phone number, and role).
Business identity details (organisation name, sector, and related business context).
Correspondence records from emails, forms, and other communications.
Enquiry and project-related information you choose to provide.
Basic website usage data, including technical and analytics information.

3) How we use personal data

To respond to enquiries and consultation requests.
To assess service fit and scope potential engagements.
To communicate with clients, prospects, suppliers, and professional contacts.
To deliver consultancy services and related operational support.
To improve website performance, reliability, and user experience.
To maintain security, prevent misuse, and protect systems.
To comply with legal, regulatory, and professional obligations.

4) Lawful bases

Depending on context, we rely on one or more of the following UK GDPR lawful bases:

Legitimate interests in running and developing our B2B consultancy services.
Steps prior to entering into a contract at your request.
Performance of a contract with a client or supplier.
Compliance with legal obligations.
Consent, where applicable, for non-essential analytics or optional communications.

5) Who we share data with

We may share relevant data, where necessary, with:

Professional advisers (for example legal, insurance, or accountancy support).
Service providers supporting operations, communications, and administration.
Website and communications platform providers.
Regulators, public bodies, courts, or authorities where legally required.

We do not sell personal data.

6) International transfers

Where service providers process personal data outside the UK, we use appropriate safeguards to protect that data, such as contractual and organisational measures aligned with UK GDPR requirements.

7) Data retention

We keep records only for as long as reasonably necessary for the original purpose and to meet legal, regulatory, tax, insurance, and dispute-management requirements.

Retention periods vary by record type and context. We periodically review stored data and remove or anonymise information when no longer required.

8) Security

We apply practical technical and organisational safeguards designed for a professional B2B environment, including controlled access, system protections, and process controls to reduce unauthorised access, loss, misuse, or disclosure.

9) Individual rights

Subject to applicable law, individuals may have rights to:

Access personal data we hold about them.
Request rectification of inaccurate or incomplete data.
Request erasure in certain circumstances.
Request restriction of processing.
Object to processing based on legitimate interests.
Data portability, where applicable.
Complain to the Information Commissioner’s Office (ICO).

If you raise a rights request, we may need to verify identity and request further context so we can respond accurately and securely.

10) Cookies and analytics

Our website uses strictly necessary technologies and may use basic analytics tools to help us understand site performance and improve service delivery. More detail is available in our Cookie Consent Policy.

11) Contact for privacy matters

Until dedicated compliance contact details are added, please submit privacy-related enquiries through our consultation and contact route on the Home page, and we will direct your request appropriately.

This page is a general website privacy notice for a B2B consultancy and may be updated from time to time.