LEGAL
Privacy Policy
Last updated: 12 October 2026
Castlerigg Consulting (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we handle it, in line with UK GDPR and the Data Protection Act 2018.
Who we are
Castlerigg Consulting is a change and transformation consultancy. If you have any questions about this policy or how we handle your data, contact us at info@castleriggconsulting.co.uk.
What data we collect
We collect personal data when you interact with our website, specifically:
— Contact form: name, email address, organisation, enquiry type, and the content of your message.
— Newsletter sign-up: your email address.
— Website usage data: the pages you visit, your device and browser type, approximate location and how you reached the site, collected through cookies and Google Analytics where you have consented.
Cookies and analytics
We use cookies and similar technologies on this website. Strictly necessary cookies are needed for the site to function. With your consent, we also use Google Analytics, a web analytics service provided by Google, to understand how visitors use the site, such as which pages are viewed and how visitors arrive. If you have not given consent, Google Analytics does not set cookies on your device, but limited anonymous measurement signals (for example, that a page was viewed) may still be sent to Google. These signals do not identify you, and they are used only for aggregated statistics and modelling. We use this data only to improve our website and understand interest in our work.
We use CookieYes to show a cookie banner and record your choices. You can accept, reject or customise non-essential cookies, and you can change your choice at any time using the cookie settings button shown on the site.
You can also control or delete cookies through your browser settings. Blocking some cookies may affect how parts of the site work.
Why we collect it
We use this data to:
— Respond to your enquiry and provide the information you’ve requested.
— Send you our monthly insight, if you’ve subscribed, which you can unsubscribe from at any time.
— Maintain records of our communications with prospective and existing clients.
Our legal basis for processing this data is your consent (when you submit a form) and our legitimate interest in responding to business enquiries. For non-essential cookies and analytics, our legal basis is your consent, which you can withdraw at any time.
How long we keep it
We retain enquiry and newsletter data for as long as necessary to fulfil the purpose it was collected for, or until you ask us to delete it, whichever is sooner. Analytics data is retained in line with the retention settings we have chosen in Google Analytics.
Who we share it with
We use the following providers to run our website and process your data: Framer, Inc. (website hosting and contact form processing); Mailchimp, operated by Intuit Inc. (sending our newsletter and storing subscriber email addresses); Google LLC (Google Analytics, for website analytics); and CookieYes (managing cookie consent). Some of these providers are based outside the UK, so your data may be transferred internationally, in which case appropriate safeguards are used. We do not sell your data or share it with any other third party for marketing purposes.
Your rights
Under UK GDPR, you have the right to:
— Access the personal data we hold about you.
— Ask us to correct or delete it.
— Object to or restrict how we use it.
— Withdraw consent at any time (for example, unsubscribe from our newsletter or change your cookie settings).
To exercise any of these rights, email info@castleriggconsulting.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been mishandled.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.
Let’s make change work, together.
We’d love to hear about your challenge and explore how we can help.
Get in Touch
One thoughtful insight. Once a month.
“
Castlerigg helped us turn digital strategy into a practical business strategy for the council. Their work gave us a clear view of where we needed to strengthen our digital capability.
— Paul Gribben, Head of Digital Services, Belfast City Council
“
The Gemini Programme has given Cheshire East greater control over key aspects of service delivery, allowing us to better align ICT with our local priorities.
— Gareth Pawlett, Director of Digital Services, Cheshire East Council
“
The Gemini Programme achieved exceptional success. The disciplined approach to delivery ensured the council remained on track despite the scale and complexity of change.
— Roger Davies, Head of DDAT Services, Cheshire West and Chester Council