Privacy Policy

Last updated: 24 October 2026

1. Who we are

CQC Consultant provides CQC registration, compliance, governance and mock-inspection consultancy support. For privacy enquiries you can contact us through the website consultation form or write to CQC Consultant, Argent House, 175 Hook Rise South, Tolworth, Surrey, KT6 7LD.

2. Information we may collect

We may collect information you choose to provide when you contact us, request a consultation or make an enquiry. This may include your name, organisation, contact details, service type, location, regulated activities, project requirements and the content of your message.

We may also receive technical information about use of the website, such as pages viewed, device/browser information and interaction data, through website analytics and similar technologies.

Aggregate website contact statistics

We use Cloudflare to count telephone and WhatsApp link clicks as daily page-level totals solely to improve website usability and access to our consultancy service. This separate counter does not build visitor profiles, measure advertising campaigns or send its reports to Google. We rely on the PECR statistical-purposes exception for this measurement, subject to clear information and a free, simple objection. Statistics are on unless you object. Select Reject, or switch off Aggregate website statistics in Cookie Settings and save; existing off choices are preserved. Google Analytics remains off until you consent.

The reporting table holds only the UTC date, page path, link type and total. Network requests also involve technical connection information, including an IP address processed by Cloudflare. The Worker creates temporary, minute-scoped keyed security tokens for rate limiting in a separate table. These are pseudonymous security data, not anonymous visitor statistics, and are not used for profiling or advertising. Cleanup runs on accepted requests and through a separate job scheduled every minute, including during inactivity, to remove security records older than the current and preceding UTC minute. Scheduling delays or failures can extend retention; aggregate click totals are kept separately and are not deleted by this cleanup. Our purpose for this limited security processing is to protect the endpoint against abuse; our lawful basis for the limited security processing is legitimate interests. See the Cookie Policy for the controls and retention detail.

3. How we use personal information

• to respond to enquiries and arrange consultations;
• to understand the support you are seeking and prepare proposals or scopes of work;
• to provide agreed consultancy services;
• to administer our relationship with clients and maintain business records;
• to improve website performance, content and user experience;
• to meet legal, regulatory, accounting or security requirements.

4. Lawful bases

Depending on the circumstances, we may process personal information because it is necessary to take steps at your request before entering into a contract, to perform a contract, to comply with a legal obligation, or because we have a legitimate business interest that is not overridden by your rights. Where consent is required, you can withdraw it at any time.

5. Analytics and cookies

This website uses Google Analytics 4 only when you choose to allow analytics cookies. Before you make a choice, and when you reject non-essential cookies, analytics storage remains denied and the Google Analytics library is not loaded. If you allow analytics, we may measure page views and selected interactions such as telephone, consultation and form activity. You can change or withdraw your choice at any time using the Cookie Settings link in the footer. See our Cookie Policy for more information.

6. Sharing information

We do not sell personal information. We may share information with service providers that help us operate the website, communications, analytics, document storage or professional services, where this is necessary and subject to appropriate safeguards. We may also disclose information where required by law.

7. International transfers

Some technology providers may process information outside the United Kingdom. Where this occurs, we expect appropriate safeguards to be used in accordance with applicable data-protection law.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain business records, resolve queries and meet legal or regulatory obligations.

9. Your rights

Depending on the circumstances, UK data-protection law may give you rights to request access to your personal information, ask for inaccurate information to be corrected, request deletion or restriction, object to certain processing, or request transfer of information. You may also have the right to complain to the Information Commissioner's Office.

10. Security

We take reasonable organisational and technical measures intended to protect personal information. No internet transmission or storage system can be guaranteed to be completely secure.

11. Links to other websites

This website may contain links to external websites, including official regulatory sources. Their privacy practices are controlled by those organisations and are not covered by this policy.

12. Changes to this policy

We may update this policy when our website, services or legal requirements change. The latest version will be published on this page.