Privacy Policy
Effective date: 26 January 2026
Last updated: 26 January 2026
1. Who we are
This Privacy Policy explains how personal data is collected, used, and protected when you visit this website or engage the consulting and mentoring services provided by Mandy Lee Jandrell trading as MLJ Consulting.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, MLJ Consulting is the data controller.
Trading name: MLJ Consulting
Contact email: hello (at) mljconsulting dot co dot uk
If you have any questions about this Privacy Policy or how your personal data is handled, you can contact us using the email address above.
2. How we collect personal data
We collect personal data in the following ways:
- Directly from you, for example when you:
- make an enquiry,
- book a call or session,
- complete onboarding or feedback forms,
- enter into a contract,
- communicate with us by email.
- Automatically, when you visit our website, through cookies and similar technologies.
- From third‑party services, such as scheduling tools, payment processors, video‑conferencing platforms, or analytics providers.
3. Personal data we collect
The personal data we may collect includes:
- Identity and contact information: name, email address, phone number, organisation, role.
- Professional information: information you share during consulting or mentoring sessions, including goals, challenges, and feedback.
- Transactional information: invoices, payment status, and service history (payment card details are processed securely by third‑party providers and are not stored by us).
- Technical data: IP address, browser type, device information, and usage data.
- Communications: emails and notes relating to our work together.
We do not intentionally collect special category data unless it is necessary for a specific purpose and you have provided it voluntarily.
4. How and why we use your personal data
We use your personal data for the following purposes and lawful bases:
| Purpose | Lawful basis |
| Responding to enquiries | Legitimate interests |
| Providing consulting and mentoring services | Contract |
| Managing bookings, sessions, and client relationships | Contract |
| Invoicing and accounting | Legal obligation |
| Sending service‑related communications | Contract or legitimate interests |
| Sending marketing emails (where applicable) | Consent or soft opt‑in |
| Improving website performance and security | Legitimate interests |
Where processing is based on consent, you may withdraw that consent at any time.
5. Marketing communications
If you opt in to receive marketing communications, we may send you updates, insights, or information about services.
You can unsubscribe at any time by:
- clicking the unsubscribe link in any email, or
- contacting us at hello (at) mljconsulting dot co dot uk
6. Cookies and similar technologies
Our website uses cookies to ensure it functions properly and to understand how visitors use the site.
Cookies may include:
- Essential cookies (required for site functionality),
- Analytics cookies (to measure site usage),
- Optional cookies (if enabled).
Where required, you will be asked to consent to non‑essential cookies. You can control cookie settings through your browser or our cookie banner.
7. Sharing your personal data
We may share personal data with trusted third parties, including:
- website hosting providers,
- booking and scheduling tools,
- email service providers,
- video‑conferencing platforms,
- payment processors,
- professional advisers (such as accountants).
All third parties are required to handle your data securely and in accordance with data protection laws. We do not sell personal data.
8. International data transfers
Some service providers may process personal data outside the UK. Where this occurs, appropriate safeguards are used, such as UK adequacy regulations or approved contractual protections.
Further information about safeguards is available on request.
9. Data retention
We retain personal data only for as long as necessary for the purposes described in this policy, including legal and accounting requirements.
Typical retention periods include:
- Client and contract records: up to 7 years after the end of the engagement.
- Financial records: up to 7 years.
- Marketing data: until you unsubscribe or withdraw consent.
- Session notes: retained only as long as necessary for service delivery.
10. Your rights
Under UK GDPR, you have the right to:
- access your personal data,
- request correction of inaccurate data,
- request deletion of data (in certain circumstances),
- restrict or object to processing,
- withdraw consent at any time,
- request data portability,
- lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise your rights, contact us at hello (at) mljconsulting dot co dot uk
You can also complain to the ICO at www.ico.org.uk or by telephone on 0303 123 1113.
11. Security
We use appropriate technical and organisational measures to protect your personal data, including secure systems, access controls, and reputable service providers.
While no system can be guaranteed as 100% secure, we take reasonable steps to reduce risk.
12. Children’s data
Our services and website are not intended for children under the age of 18. We do not knowingly collect personal data from children.
13. Automated decision‑making
We do not use automated decision‑making or profiling that produces legal or similarly significant effects.
14. Third‑party links
This website may contain links to third‑party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The most recent version will always be available on this website, with the effective date shown at the top.
16. Contact
If you have any questions about this Privacy Policy or how your personal data is handled, please contact:
MLJ Consulting
📧 hello (at) mljconsulting dot co dot uk