---
title: Privacy policy
date: 2026-06-27T11:33:30Z
modified: 2026-07-26T07:47:29Z
permalink: "https://www.mallardhq.com/privacy-policy/"
type: page
status: publish
excerpt: ""
wpid: 3
timestamp: 2026-07-26T07:47:29Z
tags: []
---

**Updated: 26 July 2026**

This privacy policy explains how Mallard Operating Partners Ltd trading as Mallard (“Mallard”, “we”, “us” or “our”), collects, uses and protects your personal data when you visit our website or otherwise interact with us. It also sets out your rights under UK data protection law.

We are committed to protecting your privacy and handling your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

## Who we are

Mallard Operating Partners Ltd (trading as Mallard) is the data controller responsible for your personal data.

- **Registered company name:** Mallard Operating Partners Ltd
- **Trading name:** Mallard
- **Company number:** 17022778
- **Registered address:** Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton BL6 6HG
- **ICO registration reference:** ZC183734
- **Contact for privacy matters:** <simon@mallardhq.com>

If you have any questions about this policy or how we handle your personal data, please contact us at <simon@mallardhq.com>.

## The personal data we collect

We collect personal data in the following ways:

**When you use our contact, call booking or enquiry form.** We collect the information you provide, which may include your name, email address, company name and the content of your message.

**When you sign up to our newsletters.** We collect your email address and any name you provide so that we can send you our newsletter and related updates.

**When you browse our website.** We use analytics cookies and similar technologies that may collect information such as your IP address, device and browser type, the pages you visit, how you arrived at our site and how you interact with it. We also automatically record standard server log information, such as your IP address and the time of your request, which our hosting provider generates as part of running the website securely.

We do not intentionally collect any special category data (such as data about health, race, religion or political opinions), and we ask that you do not send us such information through our forms.

## How we use your personal data and our lawful bases

Under UK GDPR we must have a lawful basis for processing your personal data. We rely on the following:

**To respond to your enquiries.** When you contact us through our form, we use your details to reply and deal with your request. Our lawful basis is our legitimate interests in responding to people who get in touch with us, and, where relevant, taking steps to enter into a contract with you.

**To send you our newsletter.** We send our newsletter on the basis of your consent, which you give when you sign up. You can withdraw your consent and unsubscribe at any time using the link in every email or by emailing us.

**To operate, secure and improve our website.** We use analytics and server log data to understand how our website is used, to keep it secure and to improve it. Our lawful basis is our legitimate interests in maintaining and improving our website, and, for non-essential cookies, your consent (see Cookies below).

**To comply with our legal obligations.** We may process personal data where we are required to do so by law, for example to keep business or accounting records.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms, and we only proceed where we are satisfied they are not.

## Cookies and analytics

Our website uses cookies and similar technologies. Cookies are small text files placed on your device.

**Essential cookies** are needed for the website to function and are set automatically.

**Analytics cookies** help us understand how visitors use our website so we can improve it. We only set non-essential analytics cookies where you have given consent through our cookie banner. You can change or withdraw your preferences at any time via the cookie settings on our website or through your browser settings.

Our analytics are provided by Google Analytics. This may involve your data being processed as described in that provider’s own privacy information.

## Who we share your personal data with

We do not sell your personal data. We share it only with trusted third parties who help us run our business, and only to the extent necessary. These include:

- **Our email and newsletter platform**, Kit (kit.com), which stores newsletter subscriber data and sends emails on our behalf.
- **Our website hosting and analytics providers**, who process data as part of delivering and measuring our website.
- **Professional advisers and service providers** (such as IT, accounting or legal advisers) where reasonably necessary.
- **Authorities or regulators** where we are required to disclose information by law.

These providers act as our data processors and are only permitted to use your personal data in accordance with our instructions and applicable law.

## International transfers

Some of our service providers may be based outside the United Kingdom. Where personal data is transferred outside the UK, we take steps to ensure it is protected to a standard consistent with UK data protection law, for example by relying on adequacy regulations or by putting in place appropriate safeguards such as the International Data Transfer Agreement or Addendum.

## How long we keep your personal data

We keep your personal data only for as long as necessary for the purposes described in this policy:

- **Enquiry and contact form data** is kept for as long as needed to deal with your enquiry and for a reasonable period afterwards.
- **Newsletter data** is kept until you unsubscribe or ask us to remove you, after which we will delete or suppress your details.
- **Analytics data** is retained in line with our analytics provider’s retention settings.

We will delete or anonymise personal data when it is no longer needed, unless we are required to keep it to meet a legal obligation.

## How we protect your personal data

We use appropriate technical and organisational measures to keep your personal data secure and to protect it against unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

## Your rights

Under UK data protection law you have the following rights in relation to your personal data:

- **The right to be informed** about how we use your personal data.
- **The right of access** to a copy of the personal data we hold about you.
- **The right to rectification** of inaccurate or incomplete data.
- **The right to erasure** of your personal data in certain circumstances.
- **The right to restrict processing** in certain circumstances.
- **The right to data portability**, allowing you to obtain and reuse your data.
- **The right to object** to processing based on our legitimate interests, and to direct marketing at any time.
- **Rights relating to automated decision-making and profiling.** We do not make decisions about you based solely on automated processing that has a legal or similarly significant effect.

Where we process your data on the basis of consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of any processing carried out before you withdrew your consent.

To exercise any of these rights, please contact us at <simon@mallardhq.com>. We will respond within one month. There is normally no charge, although we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.

## How to complain

If you have concerns about how we handle your personal data, please contact us first at <simon@mallardhq.com> so we can try to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

- **Website:** [https://ico.org.uk](https://ico.org.uk)
- **Helpline:** 0303 123 1113
- **Post:** Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

## Changes to this policy

We may update this privacy policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your personal data.Who we are