Privacy Policy

How Magnus Consulting collects, uses, and protects your personal data - including our responsible use of artificial intelligence.

Data Controller: Magnus Consulting Ltd · Last updated: March 2026 · Applies to: magnusconsulting.co.uk & all Magnus services · Contact: hello@magnusconsulting.co.uk

Our commitment to privacy

Magnus Consulting Ltd is a B2B growth consultancy registered in England and Wales. We are committed to respecting and protecting your personal data in accordance with UK GDPR, the Data Protection Act 2018, and all applicable privacy legislation.

This policy describes how we collect and handle personal data through our website, our services, and our day-to-day business operations. It applies to anyone who visits our website, contacts us, engages with our content, or works with us as a client or partner.

We are the Data Controller. Magnus Consulting Ltd determines the purposes and means of processing your personal data. If you have any questions about this policy or how your data is handled, please contact us at hello@magnusconsulting.co.uk.

What data we collect

We collect personal data in a limited number of ways and only what is necessary for the purposes described in this policy.

Information about your use of our website

When you visit our website, we may automatically collect information about your visit, including pages viewed, time spent on the site, traffic data, location data (at city or country level), device and browser type, and referral sources. This is collected through cookies and analytics tools.

Information you provide directly

Where you submit your details through our contact form, request a consultation, download a report, register for an event, or correspond with us by email or phone, we may collect your name, email address, job title, company name, and the content of your communication.

Data processed in the course of engagements

As part of delivering consulting services, we may process personal data relating to individuals at client organisations -such as contact details, professional backgrounds, and information shared during discovery, research, or strategy work. This is governed by the terms of our client agreements and any applicable data processing addenda.

We do not process special category data. Magnus Consulting does not intentionally collect or process special category personal data (such as health, ethnicity, or religious belief) through our website or standard service delivery. If you share such information with us incidentally, we will handle it with appropriate care and discretion.

Lawful basis for processing

Under UK GDPR, we must have a valid lawful basis for processing personal data. Depending on the context, we rely on one or more of the following:

Legitimate interests

We process data where it is necessary for our legitimate business interests, and where those interests are not overridden by your rights and interests. This includes processing data to respond to enquiries, develop our services, protect our business, and conduct business development activities with prospective clients. We have carried out legitimate interest assessments where required.

Contract performance

Where you or your organisation has engaged Magnus Consulting, we process personal data to the extent necessary to fulfil our contractual obligations and to manage the client relationship effectively.

Consent

Where we rely on consent -for example, to send marketing communications or to use certain non-essential cookies -we will ask for your consent clearly and specifically. You may withdraw your consent at any time without detriment by contacting us at hello@magnusconsulting.co.uk.

Legal obligation

We may process personal data where we are required to do so by law or in response to a valid request from a regulatory or law enforcement authority.

AI and technology in our work

Magnus Consulting actively uses artificial intelligence tools and technologies as part of our services and internal operations. We are committed to using AI responsibly, transparently, and in a manner consistent with our data protection obligations.

Our approach to responsible AI. We do not use AI to make solely automated decisions that produce legal or similarly significant effects about individuals. Where AI tools are used to support our work, human oversight and professional judgement remain central to every output we deliver.

How we use AI tools

We use generative AI platforms and other AI-assisted tools to support activities including research and analysis, content development, data synthesis, strategy development, and internal process efficiency. Where AI tools are used in the course of client engagements, this is handled in accordance with our client agreements.

Personal data and AI systems

We take care not to input personal data into AI tools that are not operating under appropriate data protection terms. Where we use third-party AI platforms (such as large language model providers), we review their data processing agreements and, where relevant, ensure that personal data is processed in accordance with UK GDPR requirements. We do not use publicly available AI tools to process sensitive personal data.

Our AI-powered products

Magnitude -our AI-powered B2B GTM platform -and related AI tools developed by Magnus may process professional and commercial data on behalf of our clients as part of service delivery. Any such processing is governed by our client data processing agreements, which set out the respective responsibilities of Magnus as processor and the client as controller.

Training data

Magnus Consulting does not use client personal data or personal data collected through our website to train AI models. Where we develop or fine-tune AI systems, we do so using appropriately licensed data and in accordance with applicable data protection legislation.

AI and your rights

If you have questions about whether or how AI tools have been used in processing your personal data in connection with our services, or if you wish to request human review of any AI-assisted output, please contact us at hello@magnusconsulting.co.uk.

Third-party AI providers. We currently use AI services provided by third parties including (but not limited to) Anthropic, OpenAI and Alphabet. These providers act as data processors where personal data is involved, and we ensure appropriate contractual protections are in place. Their own privacy policies and terms also apply to data processed through their platforms.

Sharing and international transfers

We will only share personal data where we have a legitimate, lawful reason to do so. We never sell your personal data to third parties.

Categories of recipients

Personal data held by us may be shared with:

  • Technology and software service providers (cloud platforms, CRM systems, analytics tools, website hosting, data backup and security services)
  • AI platform providers, where their tools are used in the delivery of our services
  • Professional advisers including lawyers, accountants, and auditors
  • Digital marketing and communications agencies appointed to conduct activity on our behalf
  • Other Magnus Consulting entities or affiliated companies
  • Law enforcement, regulatory authorities, or other bodies where required by law or regulation

International transfers

Where possible, personal data is stored and processed within the United Kingdom. However, some of our third-party service providers operate outside the UK and the European Economic Area (EEA). Where personal data is transferred internationally, we take all reasonable steps to ensure it is protected to the same standard required under UK GDPR, including through the use of UK International Data Transfer Agreements (IDTAs), Standard Contractual Clauses, or by ensuring transfers are to countries with an adequacy decision.

Digital marketing partners

We periodically work with digital marketing partners to conduct marketing activity on our behalf. Any such activity is conducted in compliance with applicable data protection legislation, and our partners are required to process data only for the specified purposes and in accordance with our instructions.

How long we keep your data

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Retention periods vary depending on the nature and context of the data:

Contact enquiries

Information submitted through our contact form or provided in the course of a business enquiry is retained for a reasonable period following our last interaction, to allow us to respond appropriately and follow up as needed. Where an engagement does not proceed, we do not retain data indefinitely.

Client data

Data processed in connection with client engagements is retained in accordance with our client agreements, our legal obligations, and standard professional practice. Financial and contractual records may be retained for up to seven years to meet statutory requirements.

Marketing data

Where you have opted in to marketing communications, we retain your contact details until you unsubscribe or withdraw consent. We periodically review and cleanse our marketing data to ensure it remains accurate and up to date.

Website and analytics data

Aggregated and anonymised analytics data may be retained indefinitely. Identifiable usage data is subject to the retention settings of our analytics platform.

Requesting deletion. You have the right to request that we delete your personal data in certain circumstances. Please see the Your Rights section below, or contact us at hello@magnusconsulting.co.uk.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have a number of rights in relation to your personal data. We are committed to facilitating these rights promptly and without undue delay.

  • Right of access - You can request a copy of the personal data we hold about you and information about how we use it.
  • Right to rectification - You can ask us to correct any inaccurate or incomplete personal data we hold about you.
  • Right to erasure - In certain circumstances, you can ask us to delete your personal data - for example, where it is no longer necessary for the purpose for which it was collected.
  • Right to restrict processing - You can ask us to suspend processing of your data in certain circumstances, for example while a complaint is being resolved.
  • Right to object - Where we rely on legitimate interests as our lawful basis, you have the right to object to that processing. We will cease unless we can demonstrate compelling legitimate grounds.
  • Right to data portability - Where processing is based on consent or contract, you can request that we provide your data in a structured, commonly used, machine-readable format.

Exercising your rights. To exercise any of the above rights, please contact us at hello@magnusconsulting.co.uk. We will respond within one calendar month. We may need to verify your identity before processing a request.

Complaints

If you have concerns about how we have handled your personal data, we ask that you contact us first so we can try to resolve the matter directly. If you remain dissatisfied, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113.

Cookies

Our website uses cookies to enhance your experience and to help us understand how our website is used. You can manage your cookie preferences at any time via the cookie settings on our website.

Strictly necessary cookies

These cookies are essential for the operation of our website and cannot be disabled. They include cookies that enable you to navigate the site and use its features.

Analytics cookies

We use Google Analytics to collect anonymous information about how visitors use our website -including the number of visitors, most popular pages, and traffic sources. This information helps us improve our website. Analytics cookies will only be placed with your consent.

Third-party cookies

Where our website includes content from or links to third-party platforms (such as LinkedIn), those platforms may set their own cookies in accordance with their own privacy policies. We encourage you to review those policies directly.

Managing your cookie preferences. You can update your cookie preferences at any time using the cookie settings panel on our website, or by adjusting the settings in your browser. See our Cookie Policy for full details.

Social media and third-party links

Social media

Magnus Consulting maintains a presence on LinkedIn and other social media platforms. When you interact with our content on those platforms, the privacy practices of those platforms apply. We encourage you to review the relevant privacy notices and terms of use, particularly regarding how your profile data may be used in those environments.

Links to third-party websites

Our website may contain links to external websites. When you follow these links, you will leave our website and Magnus Consulting cannot accept liability for the use of your personal data by those third parties. We recommend reviewing the privacy policies of any third-party sites you visit.

Updates to this policy

We review and update this Privacy Policy periodically to reflect changes in our practices, our services, or applicable law. Any changes will be posted on this page with the updated effective date shown at the top of the policy.

We encourage you to review this policy regularly. Where changes are material, we will take steps to bring them to your attention.

This version. This policy was last reviewed and updated in March 2026. The previous version has been superseded by this document.

Questions about this policy?

Get in touch with our team and we'll be happy to help.

Magnus Consulting Ltd
Email: hello@magnusconsulting.co.uk