top of page
Tombec-Consulting-Limited-logo

Privacy Policy

Last updated: 3rd August 2026

This privacy policy explains how Tombec Consulting Limited ("we", "us", "our") collects and uses personal data when you visit www.tombec.co.uk (the "website") or enquire about or use our fractional finance director services.

Who we are and how to contact us

Tombec Consulting Limited, registered in England and Wales, company no. 13622126

Registered address: 2 Alders End Lane, Harpenden, AL5 2HL

Email: TeresaOwen@tombec.co.uk

​​

If you have any questions about this policy or wish to exercise your rights under General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, please contact us using the details above.

The personal data we collect

Depending on how you interact with us, we may collect:

 

Information you give us directly:

​

  • Name, job title and the organisation you work for

  • Email address and telephone number

  • The content of your enquiry or message, and any documents or financial information you choose to share with us when discussing a possible engagement

  • Any other information you provide during correspondence, calls or meetings

 

Information collected automatically when you visit the website:

​

  • IP address, approximate location (city/country level), browser and device type, operating system

  • Pages viewed, time spent on pages, referring website and other usage data

  • Cookie and similar technology identifiers 

 

Information from third parties:

​

  • Publicly available business information (for example from LinkedIn, Companies House or a company's own website) where we are researching or responding to a prospective client

  • Referral information where an existing contact introduces you to us

 

We do not intentionally collect special category data (such as health data) through the website. Please do not send us sensitive personal information via the website or by email unless we have asked for it and explained why it is needed.

How we use your personal data and lawful bases

Responding to enquiries made through the website, by email or by phone - Legitimate interests (responding to a request made by you) or steps prior to entering a contract

​

Providing our fractional finance director services and managing the engagement -Performance of a contract

​

Keeping records of correspondence, advice given and work performed - Legitimate interests (business records) and legal obligation

​

Invoicing, payment and accounting - Performance of a contract and legal obligation (tax and accounting law)

​

Sending occasional updates, insights or marketing emails to business contacts - Consent, or legitimate interests where you are an existing client or made an enquiry (soft opt-in). You can unsubscribe at any time

​

Understanding how the website is used and improving it - Consent (for non-essential analytics cookies)

​

Keeping the website secure and preventing misuse or spam - Legitimate interests (security)

​

Complying with legal, regulatory and professional obligations, including anti-money laundering and client due diligence checks where applicable - Legal obligation and legitimate interests

​

Establishing, exercising or defending legal claims - Legitimate interests and legal claims

​

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms, and we have concluded that they are not. You can ask us for more information about this assessment.

​

Who we share your personal data with

We do not sell your personal data. We may share it with:

​

  • Service providers acting on our behalf

  • Our professional advisers, such as accountants, insurers and legal advisers

  • Your own organisation's advisers or software providers, where this is necessary to deliver the services agreed with you

  • Regulators, HMRC, law enforcement or other authorities where we are required or permitted to do so by law

  • A buyer or successor if we sell or reorganise our business

 

All service providers are required to keep your data secure and to use it only in accordance with our instructions.

Website enquiries that do not lead to an engagement: up to 24 months from our last contact.

​

Client records, contracts and correspondence: for the duration of the engagement and then for 6 years, to comply with tax, accounting, limitation period and professional indemnity insurance requirements.

​

Accounting and invoicing records: at least 6 years from the end of the relevant accounting period.

​

Marketing contact details: until you unsubscribe or ask us to delete them, or after 24 months of no engagement.

​

Website analytics data: for the retention period set in our analytics tool, currently 24 months.

​

We may keep data for longer where necessary to deal with an actual or potential legal claim.

How long we keep your data

Data security

We take appropriate technical and organisational measures to protect your personal data, including access controls, strong authentication, encrypted devices and connections, up-to-date software and limiting access to those who need it. No transmission over the internet can be guaranteed to be completely secure, so please bear this in mind when sending information to us by email.

Cookies and similar technologies

Our website uses cookies. Strictly necessary cookies are used to make the website work and do not require your consent. Non-essential cookies — including analytics and any advertising cookies — are only set where you have given consent through our cookie banner. You can withdraw or change your consent at any time via your browser settings.

This party links and embedded content

The website may link to third-party sites or embed content such as a LinkedIn profile or scheduling tool. We are not responsible for the privacy practices of those third parties, and we encourage you to read their own privacy notices,

Your rights

Under UK data protection law you have the right to:

​

  • Be informed about how we use your data (this policy)

  • Access a copy of the personal data we hold about you

  • Rectification of inaccurate or incomplete data

  • Erasure of your data in certain circumstances

  • Restrict processing in certain circumstances

  • Data portability for data you provided to us where processing is based on consent or contract

  • Object to processing based on legitimate interests, and to direct marketing at any time

  • Withdraw consent at any time where we rely on consent

 

To exercise any of these rights, email us at TeresaOwen@tombec.co.uk. We will respond within one month, though we may extend this by up to two further months for complex requests. We may need to verify your identity first. Exercising your rights is free of charge in most cases.

​

We do not carry out automated decision-making or profiling that has a legal or similarly significant effect on you.

​

Providing your data

Where we ask for data to enter into or perform a contract with you, or to meet a legal obligation such as client due diligence, we may be unable to provide our services if you do not provide it. Otherwise, providing your data is voluntary.

Complaints

f you are unhappy with how we have handled your personal data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO):

​

  • Website: ico.org.uk

  • Helpline: 0303 123 1113

  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, and the "last updated" date at the top will show when it was last revised. Where changes are significant, we will take reasonable steps to notify you.

bottom of page