Please read the following information carefully, as it contains important details about how we will use the personal information that you give to us.
Ampersand-us Ltd (“&us”) is a boutique business consultancy, partnering with brands to create valuable change, inside and out. We work with UK and international clients, including retail, financial services, pharmaceuticals, and charity. We partner with them to help them determine their strategic direction, and design and deliver great products and services in a fast-paced, repeatable and fail-safe way. Ampersand-us Ltd is registered in England and Wales with company number 10874029
During the course of our business, it is necessary for us to collect and hold certain data relating to our clients, visitors to our website and those who make enquiries either by using this website, or in other ways, such as by telephone, SMS or in writing.
We comply with all relevant data protection legislation, including the General Data Protection Regulations (GDPR) the Data Protection Act (DPA) and the Privacy and Electronic Communications Regulations (PECR). Protection of clients and others whose data we hold is paramount. We act as a Data Controller in respect of information held by us.
&us is committed to ensuring that your privacy is protected. If we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.

At &us, we maintain a Data Protection Policy, which includes procedures for ensuring that data protection is a priority in maintaining systems that hold personal data. Where any concerns or risks are identified, we carry out relevant impact assessments in order to determine any actions that are necessary to rectify this.

We also maintain procedures which seek to protect the availability, confidentiality and integrity of all physical and information assets. Specifically, this helps us to:

• Protect against potential breaches of confidentiality;

• Ensure all IT facilities are protected against damage, loss or misuse;

• Increase the awareness and understanding of the requirements of information security and the responsibility of our staff to protect the confidentiality and security of the information that they process; and

• Ensure the security of this website.

This policy sets out how we will gather, process, store, use and share the information that you give us. This privacy policy relates to personal data collected by us via:

• Our website;

• Email correspondence;

• Telephone calls;

• Paper communications;

• Social media;

• Visiting our offices;

• Enquiring about, or buying products or services from us; and

• Providing products or services to us.

You should be aware that if you access third party websites, using any links that may from time to time be provided on our websites, these websites are outside our control and have their own privacy policies governing the use of personal data. We do not accept any responsibility or liability for these policies.

&us may collect and process the following categories of personal data about you: Contact Details:

• Name, contact details, organisation, employment details;

• Information generated by the work, service or relationship we may have with you;

• Business details, bank and financial details, communication and correspondence;

• Information generated by visiting our website or engaging with us on social media;

• Social media aliases or usernames;

• We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information. This is statistical data about our users’ browsing actions and patterns, and does not personally identify you;

• Information that you provide by filling in forms on our site ​www.andus.co Typically, this includes (but is not exclusive to) requests for further services, surveys or complaints procedures;

• Records of your correspondence (if any) with us;

• Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data and the resources that you access;

We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.

In general terms, we collect information about you so that we can, as appropriate:

• Act on your behalf;

• Process applications for employment;

• Provide you with information about our services;

• Invoice for work we have carried out;

• Meet all legal and regulatory obligations; and

• Review how our website is used.

This information is personal data. This includes your name, home address, email address, telephone and other contact numbers and, if relevant, financial information. This is collected in various ways, such as in person, online, over the telephone or by correspondence.

On some occasions, we may also need to ask for sensitive information such as physical or mental health details, and racial or ethnic origin. We will always ask for your permission if we need to record any of your sensitive personal data in our records.

We may collect and process information that you provide during your correspondence with us. This could be, but is not limited to, one of the following ways:

• Giving information directly to us by methods including filling in forms either on our website(s) or via other media;

• Requesting any of our goods, services, downloads or other information;

• Submitting an application to work with or for us, via our website or another medium; and

• Communicating with us through methods including but not limited to e-mail, telephone and written correspondence.

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

• Where you have given consent for us to process your information;

• Where we need to perform the contractual obligations we have entered into with you, or the business you are working for or with;

• Where we need to comply with a legal obligation; and

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

The purpose(s) for which we will collect and process your data are shown below:

• To manage our relationship and administer our business either as a part of a contract or where we believe we have a legitimate interest to do so;