Privacy Policy

1. Who we are

Ludens Consulting (“we”, “us”, or “our”) operates the website at ludens.consulting. We provide strategy, data, technology, and commercial consulting services to organisations.

For privacy-related enquiries, contact us at hello@ludens.consulting.

2. Scope of this policy

This policy explains how we collect, use, store, and share personal information when you visit our website or contact us through it. It does not cover information collected in other contexts — for example, under a separate consulting engagement, which is governed by our client agreements.

3. Information we collect

The information we collect depends on how you use the site.

Information you provide

If you use our contact form, we collect the details you submit:

• Name
• Email address
• Phone number (optional)
• Organisation (optional)
• Description of your challenge or enquiry
• Timeline preference (if selected)

Information collected automatically

When you visit our website, our hosting infrastructure and web server may automatically record technical information, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited, date and time of access, and referring URL
• General location derived from your IP address

We do not currently use third-party advertising or behavioural analytics cookies on this website. Our site includes an analytics framework that could support future measurement tools; if we enable such tools, we will update this policy accordingly.

4. How we use your information

We use personal information to:

• Respond to enquiries submitted through the contact form
• Assess whether and how we might work with you
• Communicate with you about your enquiry
• Operate, secure, and maintain our website
• Understand how visitors use the site and improve its performance
• Comply with legal obligations and protect our legal rights

We do not sell your personal information. We do not use contact form data for unrelated marketing without your consent.

5. Legal bases for processing

Where UK or EU data protection law applies, we rely on the following legal bases:

• Legitimate interests — to operate and secure our website, understand how it is used, and respond to enquiries in a professional manner
• Consent — where you voluntarily submit the contact form and choose to send us your details
• Legal obligation — where we must retain or disclose information to comply with applicable law

6. How we share information

We share personal information only where necessary to run the website and handle enquiries. This may include:

• Email delivery providers — we use Emailit to deliver contact form submissions to our inbox. Submitted information is transmitted to Emailit for this purpose.
• Hosting and infrastructure providers — our website is hosted on cloud infrastructure that processes technical log data when you visit the site.
• Professional advisers — such as lawyers or accountants, where reasonably necessary
• Regulators, courts, or law enforcement — where required by law or to protect rights and safety

Third-party providers act as our processors and are permitted to use your information only to provide services to us, subject to appropriate contractual safeguards where required.

7. International transfers

Our service providers may process information in countries outside the country where you live, including countries that may not provide the same level of data protection as your home jurisdiction. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

8. How long we keep information

We retain personal information only for as long as necessary for the purposes described in this policy, unless a longer period is required by law.

• Contact enquiries are typically retained for up to two years after our last meaningful communication, unless a client relationship develops or a longer retention period is justified
• Server and security logs are retained for a limited period consistent with operational and security needs

When information is no longer needed, we delete it or anonymise it where practicable.

9. Security

We implement reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or alteration. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have rights in relation to your personal information, including:

• Access to the personal information we hold about you
• Correction of inaccurate or incomplete information
• Deletion of your information in certain circumstances
• Restriction or objection to certain processing
• Data portability, where applicable
• Withdrawal of consent, where processing is based on consent

To exercise these rights, contact hello@ludens.consulting. We may need to verify your identity before responding. You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

11. Children

Our website is not directed at children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. Material changes will be posted on this page. We encourage you to review this policy periodically.

13. Contact

For questions about this privacy policy or how we handle personal information, contact hello@ludens.consulting.