Privacy Policy

Inside Out Research Collective Ltd

Last updated: June 2026

This policy explains how Inside Out Research Collective Ltd (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website. We’re a small, independent consultancy, and we keep our handling of your data deliberately lean: we collect very little, and we use it only to respond to you and to understand how the site is performing.

We are the data controller responsible for your personal data, and we process it in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Who we are

Our contact details for any privacy or data protection matter are:

  • Data controller: Inside Out Research Collective Ltd

  • Registered address: Flat 11, 7 Copper Street, London E20 3AT

  • Email:connie@insideoutstudio.co

We are registered with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. [Registration number to be inserted once issued — our application reference is ZC174837.]

2. What this policy covers

This policy applies to the Inside Out Research Collective consultancy website. It does not cover third-party platforms we link to — such as our newsletter, LinkedIn, Instagram, or Substack — which each have their own privacy policies. When you click through to one of those services, your information is handled under their terms, not ours. We’ve flagged this again in section 6.

3. The information we collect

We’ve designed the site to collect as little personal data as possible. In practice, that means:

Information you give us directly

Our website includes a contact option. When you use it, your message opens in your own email program and is sent directly to us by email — it is not stored in a form or database on the website itself. The information we then hold is simply whatever you choose to include in your email: typically your name, your email address, and the content of your message.

Information collected automatically

Like most websites, our site is hosted on a platform (Squarespace) that may automatically log limited technical information when you visit — for example, your device type, browser, and general activity on the site. This helps the site function and stay secure. We may also use website analytics to understand how visitors use the site (see section 5).

4. How we use your information, and our lawful basis

Under UK GDPR, we must have a valid “lawful basis” for using your personal data. Here’s what we do, and why we’re allowed to:

  • To respond to your enquiry. When you email us, we use your details to reply and to take forward any conversation about working together. Lawful basis: legitimate interests (responding to people who choose to contact us) and, where relevant, taking steps to enter into a contract.

  • To understand and improve the website. We may use analytics to see how the site is performing. Lawful basis: consent where analytics rely on cookies, otherwise legitimate interests.

  • To keep the site secure and working. Basic technical data is used to run and protect the website. Lawful basis: legitimate interests.

We do not sell your personal data, and we don’t use it for automated decision-making or profiling.

5. Cookies and analytics

Cookies are small text files placed on your device when you visit a website. Our hosting platform, Squarespace, may set cookies that are necessary for the site to function and to keep it secure.

We may also use Google Analytics to understand how visitors find and use the site (for example, which pages are most read). Google Analytics sets cookies and collects information such as your approximate location, device, and browsing behaviour on the site. This data is processed by Google on our behalf. You can learn more in Google’s privacy policy.

Where required, we’ll ask for your consent before non-essential cookies are set, and you can withdraw that consent at any time. You can also manage or block cookies through your browser settings, though some parts of the site may not work as well if you do.

6. Links to our other channels and external sites

Our website links out to other platforms we use, including our newsletter (hosted on Substack), LinkedIn, Instagram, and Substack. We may also link to a scheduling tool (such as Calendly) if you want to book time with us.

Once you follow one of these links, you’re on a third party’s platform, and your information is governed by their privacy policy rather than this one. We’d encourage you to read the privacy notice of any service before sharing your information with it. We’re not responsible for the content or privacy practices of external sites.

7. Who we share your information with

We don’t share your personal information with anyone for their own marketing or commercial purposes. We do rely on a small number of trusted service providers who process data on our behalf to help us run our business, for example:

  • Squarespace — our website hosting platform.

  • Our email provider — used to receive and respond to your enquiries.

  • Google — where website analytics are in use.

  • Calendly — if you choose to book a call through a scheduling link.

These providers act as our “processors” and may only use your data on our instructions. We may also disclose information if we’re legally required to do so — for example, to comply with a court order or regulatory obligation.

8. International data transfers

Some of our service providers (such as Squarespace and Google) are based outside the UK, which means your personal data may be transferred to and processed in countries with different data protection laws. Where this happens, we rely on these providers having appropriate safeguards in place — such as the UK’s International Data Transfer Agreement, the EU Standard Contractual Clauses, or transfers to countries the UK considers to provide adequate protection — so that your data remains protected to UK standards.

9. How long we keep your information

We keep your information only for as long as we need it. Because enquiries reach us by email, your message stays in our email account and is archived automatically after a period of inactivity. We periodically review and clear out correspondence we no longer need.

Where an enquiry leads to us working together, we may keep relevant records for longer to meet our legal, accounting, and contractual obligations — typically up to six years, in line with standard UK requirements. After that, we securely delete or anonymise the information.

10. Your rights

Under UK data protection law, you have a number of rights over your personal data. You can:

  • Ask for a copy of the personal data we hold about you (the right of access);

  • Ask us to correct information that’s inaccurate or incomplete;

  • Ask us to delete your personal data, where there’s no good reason for us to keep it;

  • Ask us to restrict or stop using your data in certain circumstances;

  • Object to us using your data where we’re relying on legitimate interests;

  • Ask to receive your data in a portable format, where applicable;

  • Withdraw your consent at any time, where we’re relying on consent.

To exercise any of these rights, just email us at connie@insideoutstudio.co. We’ll respond within one month, and we won’t charge you for making a request in normal circumstances.

11. Children’s privacy

Our website is aimed at businesses and professionals, and is not intended for children. We don’t knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we’ll delete it.

12. How to complain

If you have any concerns about how we handle your personal data, we’d genuinely like the chance to put things right — so please do get in touch with us first.

You also have the right to complain to the ICO, the UK’s data protection regulator, at any time. You can reach them at ico.org.uk, or by calling their helpline on 0303 123 1113.

13. Changes to this policy

We may update this policy from time to time to reflect changes in how we work, the tools we use, or the law. When we do, we’ll revise the “Last updated” date at the top of this page. We’d encourage you to check back occasionally so you stay informed