Consultancy Services

Senior compliance support, sized to your organisation.

Every engagement is led directly by a qualified GDPR Practitioner, with a network of experienced data protection professionals behind them. Choose from retained advisory support, time-boxed project delivery, or full outsourced DPO cover.

Outsourced, interim & part-time DPO / SRI

Direct access to a fully qualified GDPR Practitioner acting as your appointed Data Protection Officer or Senior Responsible Individual — without the cost of a full-time hire.

  • Named DPO/SRI on your policies and ICO register
  • Board-level reporting and quarterly compliance reviews
  • Day-to-day advice on subject access, breaches, and processing decisions

DPIAs, audits & gap analyses

Structured assessments against UK GDPR, the Data Protection Act 2018 and the Data Use and Access Act 2025 (DUAA) — with pragmatic, prioritised remediation plans.

  • Data Protection Impact Assessments for new products and processing
  • Full compliance audits with an actionable risk register
  • Article 30 records of processing activities (RoPA)

Privacy policies & documentation

Plain-English privacy notices, cookie policies, retention schedules and internal procedures — drafted to be legally sound and genuinely readable.

  • Public-facing privacy and cookie notices
  • Internal data protection policy suite
  • Retention schedules and records management procedures

Staff & executive training

Engaging training sessions calibrated to your audience — from all-staff inductions to board-level briefings on the DUAA and regulatory risk.

  • All-staff data protection awareness sessions
  • Role-specific training for HR, marketing and product teams
  • Board and executive briefings on regulatory change

Technical & Organisational Measures (TOMs)

Assistance producing and maintaining TOMs reports that stand up to procurement, insurance and regulatory scrutiny.

  • Documented technical and organisational controls
  • Third-party and processor due diligence
  • Evidence packs for enterprise procurement questionnaires

Regulatory response

Specialist support for clients engaged with the ICO, Ofcom or the Advertising Standards Authority — particularly where formal complaints, investigations or enforcement actions have commenced.

  • ICO complaint and investigation handling
  • Ofcom and ASA regulatory correspondence
  • Breach reporting, containment and stakeholder communications

Retained & project support

Ongoing retained advisory support, or time-boxed project delivery — whichever fits how you actually work.

  • Monthly retainer with defined SLAs
  • Fixed-scope project delivery
  • Cover for maternity, sabbatical or interim gaps

Not sure which engagement fits?

Send a short outline and we'll come back within two working days with a proposed shape and indicative fees.

Get in touch