Privacy Policy
McKenna Consultants Ltd Privacy Policy
Last updated: 21 August 2026
McKenna Consultants Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This policy, together with our Terms of Website Use and any other documents referred to in it, sets out the basis on which we process any personal data we collect from you, or that you provide to us. Please read it carefully to understand how we treat your personal data.
WHO WE ARE
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is McKenna Consultants Ltd, registered in England and Wales under company number 5079940, with its registered office at The Innovation Centre, Hornbeam House, Hornbeam Park, Harrogate, HG2 8QT.
If you have any question about this policy or about how we handle your personal data, contact us at support@mckennaconsultants.com.
INFORMATION WE MAY COLLECT FROM YOU
We may collect and process the following data about you:
- Information you give us. Personal data you provide by filling in the enquiry form on our site, or by contacting us by email or telephone. This typically includes your name, business email address, telephone number, employer and the content of your enquiry. If you correspond with us, we may keep a record of that correspondence.
- Information we collect about your visit. Technical data including your IP address, browser type and version, operating system, and information about how you use our site — the pages you view, the links you follow, and how long you spend on each page.
Our enquiry form is served from our own systems at contact.hourglass.mckennaconsultants.com; submissions are delivered to us and are not shared with a third-party form provider.
HOW WE USE YOUR INFORMATION AND OUR LAWFUL BASES
Under the UK GDPR we must have a lawful basis for each purpose for which we process your personal data. Those purposes and bases are:
| Purpose | Lawful basis |
|---|---|
| Responding to an enquiry you send us, and any follow-up correspondence | Our legitimate interests in responding to people who contact us about our services, and taking steps at your request before entering into a contract |
| Providing our services and administering our contract with you or your employer | Performance of a contract |
| Keeping accounting and tax records | Compliance with a legal obligation |
| Understanding how our site is used, so that we can improve it (Google Analytics) | Your consent, given through our cookie banner |
| Identifying the organisations that visit our site (Snitcher) | Our legitimate interests in understanding which businesses are interested in our services |
| Sending you information about our other services that may interest you | Your consent, or our legitimate interests in marketing to existing business customers. You can opt out at any time |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms, and we have concluded that they are not. You have the right to object to this processing — see Your Rights below.
We will never sell your details or pass them to third parties for their own marketing purposes.
IP ADDRESSES AND COOKIES
We may collect information about your device, including where available your IP address, operating system and browser type, for system administration and to understand how our site is used in aggregate. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
For the same reason, we may obtain information about your general internet usage by using a cookie file stored on your device. Cookies contain information that is transferred to your device. They help us to improve our site and to deliver a better service. They enable us:
- To estimate our audience size and usage pattern.
- To store information about your preferences, and so allow us to customise our site according to your individual interests.
- To recognise you when you return to our site.
Non-essential cookies are only set if you accept them via our cookie banner. You can change your choice at any time using the "Cookie Preferences" link in the page footer. You may also refuse cookies through your browser settings, though if you do so you may be unable to use certain parts of our site.
We use Snitcher, a business-to-business visitor identification service, to help us understand which companies and organisations visit our site. Snitcher processes your IP address together with information about your visit — including the pages you view and your interactions with forms and links — to identify the business a visit originates from. This identifies organisations, not private individuals. We rely on our legitimate interest in understanding the businesses interested in our services as the lawful basis for this processing. Snitcher acts as a data processor on our behalf; you can read Snitcher's privacy policy. Snitcher only sets a persistent cookie (see the table below) if you accept cookies via our cookie banner, and you can change your choice at any time using the "Cookie Preferences" link in the page footer.
The table below explains the cookies we use and why.
Essential Cookies
| Cookie | Name | Purpose | More Info |
|---|---|---|---|
| Cookie Consent Preference | mcl_cookie_consent | Stored in your browser's local storage (not a cookie). Records whether you accepted or declined non-essential cookies so we do not ask again on every visit. Remains until you clear your browser data or change your preference via the "Cookie Preferences" link in the footer. |
Non-Essential Cookies
| Cookie | Name | Purpose | More Info |
|---|---|---|---|
| Google Analytics | _ga _ga_* | These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. | An overview of privacy at Google |
| Snitcher | SNID | Set only after you accept cookies. Used by Snitcher to recognise returning visitors so that visits can be attributed to the business or organisation they come from. Expires after 2 years. | Visit the Snitcher website |
| YouTube | visitor_info01_live pref | Set by YouTube only if you play an embedded video. We use YouTube's privacy-enhanced mode, so no YouTube cookies are set unless you start playback. | Visit the YouTube website |
WHO WE SHARE YOUR INFORMATION WITH
We share personal data with service providers who process it on our behalf and on our instructions, and only to the extent needed to provide their services to us. These currently include:
- Microsoft Azure — hosting for this website.
- Google Analytics — website analytics, where you have accepted analytics cookies.
- Snitcher — business visitor identification.
- YouTube — video playback, only if you choose to play an embedded video.
We may also disclose your personal data:
- To any member of our group, meaning our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006.
- If we sell or buy any business or assets, to the prospective seller or buyer of that business or those assets. If we, or substantially all of our assets, are acquired by a third party, personal data we hold about our customers will be one of the transferred assets.
- Where we are under a duty to disclose or share your personal data in order to comply with a legal obligation, or to enforce or apply our Terms of Website Use or our terms and conditions of supply, or to protect the rights, property or safety of ourselves, our customers or others.
WHERE WE STORE YOUR PERSONAL DATA
We store personal data on secure servers. Some of our service providers are based outside the United Kingdom, and their processing may involve a transfer of your personal data outside the UK. Where that happens, we take steps to ensure your data receives the protection required by UK data protection law — either because the destination country is covered by UK adequacy regulations, or through appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Unfortunately, the transmission of information over the internet is never completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data transmitted to our site, and any transmission is at your own risk. Once we have received your information, we use strict procedures and security features to prevent unauthorised access.
HOW LONG WE KEEP YOUR INFORMATION
We keep personal data only for as long as we need it for the purpose we collected it for:
- Enquiries that do not lead to a contract — kept while we are in active correspondence with you, and for a reasonable period afterwards in case you contact us again.
- Client records — kept for the duration of our engagement and afterwards for as long as we may need them to deal with queries or claims relating to the work.
- Accounting records — kept for the period required by UK tax and company law.
- Analytics data — kept for the retention period configured in Google Analytics.
When we no longer need your personal data, we delete it or anonymise it.
YOUR RIGHTS
Under UK data protection law you have the following rights in relation to your personal data:
- Access — to be told whether we hold personal data about you and, if so, to receive a copy of it. There is no charge for this, and we will respond within one month.
- Rectification — to have inaccurate personal data corrected, or incomplete data completed.
- Erasure — to ask us to delete your personal data, in certain circumstances.
- Restriction — to ask us to limit how we use your personal data, in certain circumstances.
- Portability — to receive personal data you gave us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller, where the processing is based on your consent or a contract and is carried out by automated means.
- Objection — to object to processing based on our legitimate interests. You have an absolute right to object to your personal data being used for direct marketing, at any time.
- Withdrawing consent — where we rely on your consent, to withdraw it at any time. This does not affect the lawfulness of processing carried out before you withdrew it.
To exercise any of these rights, contact us at support@mckennaconsultants.com. If you no longer wish to receive information about our services, you can also tell us by replying to any message we send you.
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection. You can do so at ico.org.uk/make-a-complaint or by calling their helpline on 0303 123 1113. We would appreciate the chance to address your concerns before you approach the ICO, so please do contact us first.
LINKS TO OTHER SITES
Our site may, from time to time, contain links to and from other websites. If you follow a link to any of these websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for those policies. Please check them before you submit any personal data to those websites.
CHANGES TO OUR PRIVACY POLICY
Any changes we make to our privacy policy in the future will be posted on this page, with the date of the change shown at the top, and where appropriate notified to you by email.
CONTACT
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to support@mckennaconsultants.com.