Privacy Policy

Last updated: 31 July 2026

The Innovation Office respects your privacy and handles personal information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK data protection law.

1. Who we are

The Innovation Office is the trading name of Tracey Wond, a sole trader based in the United Kingdom. Tracey Wond is the data controller for the personal information described in this policy.

For questions about privacy or to exercise your data protection rights, email hello@theinnovationoffice.co.uk.

2. Personal information we collect

Depending on how you interact with us, we may collect:

• your name, role, organisation, contact details and any broad business-location information you choose to provide;
• information you include in an enquiry, survey response, project brief, email or other correspondence;
• information needed to agree, deliver and administer consultancy, research, training or digital work;
• billing, transaction and payment-related information, although full card details are handled by the relevant payment provider rather than stored by us;
• technical information about visits to the website, such as IP address, device, browser, pages viewed and consent choices, where this is supplied by our hosting, security, analytics or consent providers; and
• marketing preferences where you choose to receive updates.

Please do not send confidential, special-category or third-party personal data unless it is necessary, lawful and agreed as part of the work.

3. How we collect information

We collect information directly from you when you contact us, complete a survey, discuss or commission work, attend a session, supply project materials or subscribe to communications. We may also receive professional contact information from your organisation, a project partner or a publicly available source where it is reasonable and lawful to do so.

Limited technical information may be collected automatically through website hosting, security logs, cookies and similar technologies. See the Cookie Policy for more information.

4. Why we use personal information

Where we rely on legitimate interests, we consider whether the use is necessary, proportionate and compatible with your rights. You can object to this processing in appropriate circumstances.

5. Who we share information with

We do not sell or rent personal information. We may share limited information where necessary with:

• Wix and its service providers for website hosting, content management, security and related services;
• Kevin Thomas Construction Services Limited (KTCS), registered in England and Wales under company number 08661151, with its registered office at Fern Lea, Bridle Lane, Stanton, Burton upon Trent, Derbyshire, England, DE15 9TQ. KTCS owns the Construction SME Programme and may receive responses submitted through the Construction Business Listening Survey so that it can research, shape and, if the project proceeds, deliver the programme. KTCS may receive and use contact details for programme follow-up only where the respondent has agreed to such contact;
• Usercentrics for Wix for consent management and the recording of cookie choices when the consent service is active;
• analytics, email, payment, file-storage and collaboration providers used for a particular purpose;
• professional advisers, including accountants, insurers and legal advisers;
• carefully selected associates or suppliers supporting a commissioned project, subject to appropriate confidentiality and data-protection arrangements; and
• public authorities or other recipients where disclosure is required by law or needed to establish, exercise or defend legal rights.

6. International transfers

Some technology providers may process information outside the United Kingdom. Where UK data protection law requires it, we rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Further information about a provider's arrangements is available in its privacy documentation.

7. How long we keep information

We keep personal information only for as long as it is needed for the purpose for which it was collected, including legal, accounting and professional obligations. Our usual periods are:

• general enquiries that do not lead to work, up to two years;
• survey responses, normally up to two years after the survey closes, unless retained longer in anonymised form;
• client, project, contract and transaction records, normally six years after the relevant relationship or financial year;
• marketing information, until you unsubscribe or after a reasonable period of inactivity; and
• website analytics and consent records, in line with the retention settings of the relevant service and no longer than reasonably necessary.

Some information may be retained for longer where this is required by law, necessary for an ongoing dispute or agreed for legitimate research or archival purposes with suitable safeguards.

8. Security

We use proportionate technical and organisational measures intended to protect personal information from accidental loss, misuse, unauthorised access, alteration or disclosure. No online system can be guaranteed completely secure, so please use an appropriate secure route before sending sensitive project material.

9. Your rights

Depending on the circumstances, you may have the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask for information to be erased or its use restricted;
• object to processing based on legitimate interests or to direct marketing;
• withdraw consent at any time, without affecting earlier lawful processing; and
• receive certain information in a portable format.

To make a request, email hello@theinnovationoffice.co.uk. We may need to confirm your identity before responding.

You can also complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

10. Cookies and website services

The website uses essential technology needed to operate securely. Non-essential analytics, functional or marketing technologies will be used only in accordance with your consent choices where consent is required. The site may also request font files from Google Fonts, which can result in technical information such as your IP address being sent to Google.

Read the Cookie Policy or use the Usercentrics privacy trigger displayed on the website to review or change your choices.

11. Other websites

This website may link to third-party sites and services. Their handling of personal information is governed by their own privacy information, not this policy.

12. Changes to this policy

We review this policy periodically and will publish material updates on this page with a revised date.