Infrastructure AdvisoryLegal
Privacy notice
How Westheath Infrastructure Advisory handles personal data when you use this website, contact the practice or send an enquiry.
Last updated: 2026-08-30
This notice explains how we handle personal data when you visit this website or contact us.
1. Who we are
This website is operated by WESTHEATH MANAGEMENT CONSULTANCIES LIMITED, company number 15808364, registered in England and Wales, whose registered office is 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom. We are the controller of the personal data described in this notice.
2. How to contact us
For anything to do with this notice or your personal data, email advisory@westheath.uk or write to our registered office.
3. What personal data we handle
If you contact us: we handle the contact details and enquiry information you provide, together with our correspondence.
If you visit the site: standard technical request records may include an IP address, page requested, date and time, and basic browser information. We do not use cookies, analytics identifiers or tracking technology — see our Cookies page.
Please do not include special category data, criminal-offence information, or confidential material in an initial enquiry. If it is relevant to your matter, contact us first so that an appropriate way to exchange it can be agreed.
4. Why we handle it, and on what basis
| What we do | Why | Lawful basis |
|---|---|---|
| Read, consider and respond to your enquiry | So we can answer you and decide whether we can help | Legitimate interests — responding to enquiries about our services. Where you are yourself the prospective client, also steps taken at your request before entering a contract |
| Keep a record of correspondence | To maintain accurate records and check for conflicts | Legitimate interests — running our practice properly |
| Run and secure this website, including server records | So the site works and is protected against misuse | Legitimate interests — operating and securing our own website |
| Meet a legal or regulatory obligation, where one applies to us | Because we have to | Legal obligation |
We do not use enquiry data for marketing, profiling or automated decision-making.
5. Who else sees it
Your enquiry is read by the principals of the practice. It is not sold or shared for third-party marketing.
We use third-party service providers for email, website hosting and related services. They process personal data on our instructions and under contractual safeguards.
We may also disclose personal data where we are required to do so by law, by a court, or by a regulator.
6. Where it is handled
Personal data may be processed outside the United Kingdom. Where it is, appropriate safeguards are used in accordance with applicable data protection law. You may contact us for information about the safeguards that apply.
7. How long we keep it
Unprogressed enquiries are kept for no more than 12 months and are then deleted. If an enquiry progresses, the relevant correspondence may move into the governed business or project record and be kept for as long as needed for the resulting engagement, record-keeping, conflict checks and applicable legal or professional obligations. Technical records are retained for a limited period. When data is no longer needed, it is deleted or put beyond use.
8. How we keep it safe
We use access controls and other proportionate technical and organisational measures. Please do not send confidential or sensitive material in an initial enquiry; contact us first so that an appropriate exchange method can be agreed.
9. Your rights
You have the right to:
- ask what we hold about you and get a copy of it;
- have it corrected if it is wrong or incomplete;
- have it deleted, in the circumstances where that right applies;
- ask us to restrict how we use it, in the circumstances where that right applies;
- object to our using it where we rely on legitimate interests — including, always and without needing a reason, to direct marketing;
- ask for it in a portable form, in the circumstances where that right applies.
To exercise any of these, email advisory@westheath.uk. We will respond within one month. We will not charge you, and we will not ask you to justify the request. We may need to check who you are before we act.
10. Complaints
Please tell us first if you are unhappy with how we have handled your personal data — email advisory@westheath.uk. We would rather put something right than have you go elsewhere with it.
You also have the right to complain to a supervisory authority:
- United Kingdom — the Information Commissioner's Office, ico.org.uk, helpline 0303 123 1113;
- Ireland and the EU — the Data Protection Commission, dataprotection.ie, or the supervisory authority in the EU country where you live or work.
Complaining to us first does not affect your right to complain to them.
11. Changes to this notice
We may update this notice. The version published here is the current one, and the date at the top tells you when it last changed. If we change it in a way that materially affects how we use your personal data, we will make that clear on this page.