Privacy · Data Protection

Privacy. Plainly stated.

How Futures House Limited collects, uses, and protects personal data submitted through this website and through direct correspondence.

Last updated: May 2026

01Who we are

Futures House Limited (“Futures House”, “we”, “us”, “our”) is a private company limited by shares, registered in England and Wales under company number 15842304. Futures House is the data controller for personal data processed through this website and through direct correspondence with us.

This policy is issued under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where this policy refers to personal data, it has the meaning given in Article 4(1) of the UK GDPR.

02What personal data we collect

We collect only what is necessary to operate the website and to engage with the people who contact us.

Information you provide directly

• Name and email address submitted via the contact form or by direct email.
• Any further information you choose to include in your message — for example, your institution, role, or the nature of an enquiry.

Information collected automatically

• Standard server log data, including IP address, browser type and version, referring page, pages visited, and timestamps.
• Cookies and similar technologies, as set out in our Cookie Policy.

We do not collect special category data (such as health or biometric data) through this website, and we ask that you do not submit such information through the contact form.

03How we use your data

We process personal data for the following purposes:

• Responding to enquiries and correspondence.
• Discussing possible engagements, programmes, manuscripts, or other professional matters.
• Maintaining and administering any subsequent engagement with us.
• Operating, securing, and improving the website.
• Complying with legal, regulatory, and accounting obligations.

We do not use personal data for advertising, profiling, or automated decision-making, and we do not sell personal data to third parties.

04Lawful basis for processing

We rely on the following lawful bases under Article 6 of the UK GDPR:

• Legitimate interests — for responding to unsolicited enquiries, operating and securing the website, and conducting our business. Our legitimate interest is the orderly operation of a professional services firm; you have the right to object to processing on this basis (see Section 9).
• Contract — where processing is necessary to take steps prior to entering into, or to perform, a contract for services with you or the organisation you represent.
• Legal obligation — where processing is required by applicable law, including tax, accounting, anti-money-laundering, and regulatory record-keeping obligations.
• Consent — where you have given specific consent for a particular purpose. You may withdraw consent at any time.

05Who we share data with

We share personal data only where necessary, and only with parties bound by confidentiality and data protection obligations. Recipients fall into the following categories:

• Service providers acting as data processors on our instructions, including our website hosting provider, email service provider, and form-handling software (WPForms). Each processor is engaged under a written data processing agreement.
• Professional advisers, including legal, accounting, and insurance advisers, where strictly necessary and bound by professional duties of confidentiality.
• Regulators, courts, and law-enforcement authorities, where required by law or in connection with the establishment, exercise, or defence of legal claims.

06International transfers

Personal data is primarily processed within the United Kingdom and the European Economic Area. Where a service provider processes data outside the UK and EEA, we ensure that an appropriate transfer mechanism is in place — typically the UK’s International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a relevant UK adequacy decision.

07How long we keep data

• Enquiries that do not lead to an engagement: retained for up to 24 months from last contact, then deleted.
• Engagement records and related correspondence: retained for 7 years from the end of the engagement, in line with tax and professional record-keeping obligations.
• Server logs: typically retained for 30 to 90 days for security and diagnostic purposes.
• Cookies: as set out in the Cookie Policy.

08Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, and supplier due diligence. No system is fully secure, and we cannot guarantee absolute security; we will notify you and, where required, the Information Commissioner’s Office of any personal data breach likely to result in a risk to your rights and freedoms.

09Your rights

Under the UK GDPR you have the following rights, exercisable free of charge in most circumstances:

• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) in defined circumstances.
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing carried out on the basis of legitimate interests.
• Right to withdraw consent at any time, where processing is based on consent.
• Right to lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise any of these rights, please email info@futureshouse.co.uk. We will respond within one month of receiving a valid request, and may ask you to verify your identity before we act.

10Children

This website is not directed at children under the age of 18, and we do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us so we can delete it.

11Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date at the top of this page and, where appropriate, communicated by other means.

12Complaints

If you have concerns about how we handle personal data, please contact us first at info@futureshouse.co.uk so we can address them. You also have the right to complain directly to the Information Commissioner’s Office at ico.org.uk or by writing to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.