Privacy Policy

Last updated: 19th August 2025

We value your trust and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and the rights you have.


1. Who We Are

We are WITHIN Corporation Ltd., a UK-based consultancy. We act as a data controller when handling personal data (for example, when you sign up for our newsletter or submit a LinkedIn Lead Form).

You can contact us at:
Phil@within.business
Homefield, Common Lane, Kings Langley, Hertfordshire, WD4 8BL.

2. What Data We Collect

We may collect:

  • Contact details (name, email, phone number, company).

  • Business information you provide to us in forms, meetings, or LinkedIn lead ads.

  • Usage data (cookies, log files, website interactions).

We do not knowingly collect data from children under 16 (or 13 if applicable by local law).

3. How We Use Your Data

We use your information to:

  • Provide you with resources you request (e.g., toolkits, downloads).

  • Add you to our newsletter list if you give us consent (including via LinkedIn Lead Forms).

  • Respond to your enquiries.

  • Improve our services, website, and marketing.

  • Meet our legal and contractual obligations.

We will never sell your personal data.

4. Legal Bases for Processing

Under GDPR/UK GDPR, we rely on:

  • Consent (e.g., when you subscribe to our newsletter).

  • Legitimate interest (e.g., to improve services or keep business records).

  • Contract (when we deliver services you’ve requested).

For California residents, we do not sell personal data and comply with the rights granted under CCPA/CPRA.

5. Sharing Your Data

We may share data with trusted service providers (“processors”) such as:

  • Email marketing platforms (e.g., Mailchimp).

  • Cloud storage and productivity tools (e.g., Microsoft, Google).

  • Analytics providers (e.g., Google Analytics).

These providers only process data on our behalf and under strict agreements.

6. International Data Transfers

If your data is transferred outside the UK/EU (for example, to US-based providers), we ensure protections are in place such as:

  • Standard Contractual Clauses (SCCs) approved by the EU/UK.

  • Adequacy decisions where applicable.

7. Cookies

We use cookies to understand website usage and improve your experience. Essential cookies are always active. For non-essential cookies, you may choose to accept or reject them via our cookie banner. 

8. Your Rights

You have the right to:

  • Access, update, or correct your data.

  • Withdraw consent at any time (e.g., unsubscribe from newsletters).

  • Request deletion of your data (“right to be forgotten”).

  • Restrict or object to processing.

  • Data portability (request a copy of your data in a portable format).

To exercise your rights, contact us at Phil@within.business. If you are based in the EU/UK, you may also lodge a complaint with your local data protection authority.

9. Retention

We keep personal data only as long as necessary to deliver services, comply with legal requirements, or until you withdraw consent.

10. Updates

We may update this policy from time to time. If changes are significant, we will notify you (for example, via email or website notice).