Privacy Policy

We collect only the minimum personal data necessary to operate the platform:

• Email address — collected when you submit a review or when an education consultancy submits an interest form. Used solely to send a one-click verification link or a confirmation email.
• Review content — the text and star rating you submit. Published publicly on the platform after email verification.
• Consultancy business information — name, email, website, and country submitted via the interest form. Used internally to create or update a consultancy listing.
• Usage data — standard web server logs (IP address, browser type, pages visited). Collected automatically and used only for security and performance monitoring.

We do not collect payment information, government identification, or any sensitive personal data as defined under GDPR Article 9.

• To send a one-click email verification link when you submit a review
• To publish your verified review publicly on the platform
• To send a confirmation email to consultancies who submit an interest form
• To notify us internally of new interest form submissions
• To monitor and maintain the security and performance of the platform

We do not use your data for advertising, profiling, or any automated decision-making. We never sell your data to third parties.

For users in the European Economic Area and UK, our legal basis for processing personal data is:

• Consent — by submitting a review or interest form, you consent to us processing your email address for the stated purpose.
• Legitimate interests — for server logs used to maintain platform security.

• Reviews — retained indefinitely as part of the platform's public record, unless you request removal.
• Email addresses from reviews — stored in our database linked to your review. Displayed on the platform only as the portion before the @ symbol (e.g. "john" from "john@example.com").
• Unverified reviews — automatically deleted after 30 days if the verification link is not clicked.
• Consultancy interest form submissions — retained for up to 12 months for follow-up purposes.
• Server logs — retained for up to 90 days.

We use the following third-party services to operate the platform. Each is bound by their own privacy policy and GDPR-compliant data processing agreements:

• Supabase — our database provider. Review data and email addresses are stored in Supabase.
• Resend / Amazon SES — our email delivery provider. Email addresses are passed to Resend solely to send transactional emails.
• AWS Amplify — our hosting provider. No personal data is stored at the hosting layer.

We do not share your data with advertisers, data brokers, or any other third parties.

ConsultancyCheck does not use tracking cookies or advertising cookies. We may use essential session cookies required for the website to function. No cookie consent banner is required as we do not use non-essential cookies.

Under GDPR and applicable privacy laws, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data and any reviews you submitted
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email us at consultancychecks@gmail.com. We will respond within 30 days.

We take reasonable technical and organisational measures to protect your personal data, including encrypted data storage (Supabase), HTTPS-only connections, and restricted database access. No system is completely secure — if you believe your data has been compromised, please contact us immediately.

ConsultancyCheck is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of the platform after changes constitutes acceptance of the updated policy.

For any privacy-related questions or requests, contact us at:
consultancychecks@gmail.com