Privacy Policy

Last updated: 22 September 2026

VSP Consulting is committed to protecting your privacy and handling personal information responsibly, transparently and in accordance with UK data protection law, including the UK GDPR and Data Protection Act 2018.

This Privacy Policy explains what personal information VSP Consulting may collect through this website and through its consultancy, facilitation, training, participation, research and evaluation work, how that information may be used and shared, how long it may be kept, and your rights in relation to it.

VSP Consulting is registered with the Information Commissioner’s Office (ICO).

ICO registration reference: ZC142429

Registration is valid until 07 May 2027.

1. Who We Are

VSP Consulting is a consultancy and facilitation service led by Quinn Stanger.

Contact details:

Quinn Stanger (he/him) | Founder & Consultant

Email: admin@vspconsulting.co.uk

Telephone: 07428 451 513

Website: vspconsulting.co.uk

VSP Consulting provides consultancy, facilitation, participation and engagement support, training, strategy development, evaluation support and related services.

VSP Consulting will normally act as the data controller for personal information collected for its own business purposes. On some commissioned projects, VSP Consulting may process personal information on behalf of a client organisation. In those circumstances, the commissioning organisation may be the data controller and its own privacy information may also apply. 

2. What Information May Be Collected

VSP Consulting may collect and process personal information including:

• Name

• Email address

• Telephone number

• Organisation details

• Job title or role

• Information submitted through contact or feedback forms

• Project or enquiry information

• Consultation, participation, research or evaluation responses

• Accessibility or support requirements where relevant to participation 

• Testimonials or feedback

• Event attendance information

• Photographs or media content (where consent has been provided)

• Website usage information and analytics data

VSP Consulting may occasionally need to process more sensitive information, including special-category personal data, safeguarding information or information relating to alleged or actual criminal offences. This will only be collected or used where it is necessary, proportionate and lawful for the work being undertaken, with additional safeguards applied. 

3. How Your Information Is Collected

Information may be collected when you:

• Submit a contact or enquiry form

• Complete a feedback or testimonial form

• Contact VSP Consulting by email or phone

• Engage in consultancy, facilitation or training work

• Attend an event, workshop or session

• Interact with the website

• Voluntarily provide information during commissioned work

• Through a commissioning or partner organisation where this is necessary for agreed project delivery

• • From publicly available professional sources where appropriate, for example organisational websites or professional profiles 

4. How Your Information Is Used

Your information may be used to:

• Respond to enquiries

• Deliver agreed services

• Manage projects and client relationships

• Arrange meetings, workshops or events

• Provide follow-up information

• Evaluate and improve services

• Demonstrate impact and learning

• Produce anonymised reports or summaries

• Share testimonials or promotional content where permission has been given

• Meet legal, contractual or safeguarding responsibilities

• Conduct consultation, participation, research or evaluation activity

• Analyse information and produce findings, insights or recommendations 

VSP Consulting may use approved AI-enabled tools to support activities such as routine administration, research, drafting, summarisation and analysis. Where personal information is involved, its use will be limited to what is necessary and proportionate. Additional restrictions apply to participant information, safeguarding information, special-category data and criminal-offence data, and AI tools will not be used where this would be inappropriate or inconsistent with client requirements. 

5. Lawful Bases for Processing

Depending on the purpose and circumstances, VSP Consulting may rely on:

• Consent – where you have clearly agreed to a particular use of your information

• Contract – where processing is necessary to enter into or deliver an agreed service or contract

• Legitimate interests – where processing is necessary for reasonable business activities and those interests are not overridden by your rights and interests

• Recognised legitimate interests – where the legal requirements for a recognised purpose, such as safeguarding, are met

• Legal obligation – where processing is necessary to comply with the law

• Vital interests – in exceptional circumstances where processing is necessary to protect someone’s life

Where special-category personal data or criminal-offence data is processed, VSP Consulting will also identify an appropriate additional legal condition before processing it.

6. Testimonials, Quotes and Media

Feedback, testimonials, quotes, logos, photographs or media content will only be used where appropriate permission or consent has been provided.

You may withdraw consent for future use of testimonials or media at any time by contacting VSP Consulting.

VSP Consulting will take particular care when working with children and young people and will normally operate in line with the safeguarding, consent and media policies of the commissioning organisation where appropriate.

7. Working with Children, Young People and Adults at Risk

Some consultancy, facilitation, participation, research or evaluation work may involve children, young people or adults who may be at increased risk of harm. 

Where this applies:

• VSP Consulting will work in line with relevant safeguarding expectations and professional standards

• Work will usually operate under the policies and procedures of the commissioning organisation where appropriate

• Information sharing may occur where there are safeguarding concerns or legal obligations to disclose information

• Confidentiality cannot be guaranteed where information indicates that someone may be at risk of harm, or where VSP Consulting has a legal or safeguarding responsibility to share information

8. How Information Is Stored

Personal information is stored using appropriate business systems and services, which may include Microsoft 365 and SharePoint, email, customer relationship and project-management systems, website and form services, and secure local storage where appropriate.

VSP Consulting applies proportionate technical and organisational measures to protect information against accidental loss, misuse, unauthorised access, alteration or disclosure. Access is limited to what is necessary for the relevant business or project purpose, with additional controls applied to higher-risk information.

Some technology providers may process information outside the UK. Where international transfers of personal information occur, VSP Consulting will use appropriate safeguards where required by data protection law.

9. Data Retention

VSP Consulting will only keep personal information for as long as necessary and proportionate.

Typical retention periods may include:

• General enquiries: up to 24 months

• Client and project records: up to 6 years

• Identifiable consultation, participation, research and evaluation information: according to the needs and agreed retention arrangements of the particular project, and deleted or anonymised when identification is no longer necessary 

• Financial and tax records: up to 6 years

• Testimonials and consent-based promotional content: until consent is withdrawn or the material is no longer required

• Safeguarding-related records: in line with legal obligations and/or commissioning organisation requirements

Information that is no longer required will be securely deleted or anonymised where appropriate.

10. Sharing Information

VSP Consulting does not sell personal information.

Where necessary and lawful, personal information may be shared with:

• Commissioning or partner organisations involved in delivering agreed work

• Professional advisers and service providers supporting VSP Consulting

• Technology and business platforms used to deliver or administer services

• Legal, regulatory or public bodies where disclosure is required or permitted by law

• Safeguarding organisations or relevant authorities where necessary to protect someone from harm

VSP Consulting will only share information that is reasonably necessary for the relevant purpose and will apply appropriate confidentiality, security and contractual safeguards where required.

11. Website Analytics and Cookies

This website uses cookies and Google services to operate the site and may use analytics information to understand how visitors use it and improve the website. 

Cookies are small files stored on your device which may collect information such as:

• Browser type

• Device information

• Pages visited

• Time spent on the website

• General location data

Where cookie choices are available, you can accept or reject optional cookies using the controls displayed on the website. You can also control cookies through your browser settings.

Embedded or third-party services may set their own cookies or collect usage information in accordance with their own privacy information.

12. Your Rights

Depending on the circumstances, UK data protection law gives you rights including:

• The right to be informed about how your personal information is used

• The right to access your personal information

• The right to request correction of inaccurate or incomplete information

• The right to request deletion of information in certain circumstances

• The right to request restriction of processing in certain circumstances

• The right to object to certain processing

• The right to data portability where applicable

• The right to withdraw consent at any time where consent is being relied upon

These rights are not absolute and which rights apply will depend on the circumstances and lawful basis for processing.

VSP Consulting does not currently use solely automated decision-making that produces legal or similarly significant effects on individuals.

Requests about your personal information can be made using the contact details above.

13. Data Protection Concerns and Complaints

If you have a concern or complaint about how VSP Consulting has handled your personal information, please contact VSP Consulting using the details above.

VSP Consulting will acknowledge a data protection complaint within 30 days, take appropriate steps to investigate it, keep you informed where necessary and communicate the outcome without unjustifiable or excessive delay.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO). You do not have to complain to VSP Consulting before contacting the ICO.

Information Commissioner’s Office

14. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in law, regulatory guidance, VSP Consulting’s activities, the services it uses or how personal information is processed.

The latest version will always be available on this website. Where a change materially affects how personal information is used, VSP Consulting will take reasonable steps to bring the change to the attention of affected individuals where appropriate.